PHP Download Manager 1.1.x Files.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15517/info PHP Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitati...

Gnews Publisher Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21194/info Gnews Publisher is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker t...

Caldera - costview2printers.php?tr SQL Injection

Caldera - costview2printers.php?tr SQL Injection source: https://www.securityfocus.com/bid/67256/info Caldera is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an...

PrestaShop - getSimilarManufacturer.php?id_manufacturer SQL Injection

PrestaShop - getSimilarManufacturer.php?idmanufacturer SQL Injection source: https://www.securityfocus.com/bid/67249/info PrestaShop is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

PrestaShop - 'getSimilarManufacturer.php?id_manufacturer' SQL Injection

source: https://www.securityfocus.com/bid/67249/info PrestaShop is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data...

iDevAffiliate - 'idevads.php' SQL Injection

source: https://www.securityfocus.com/bid/67031/info iDevAffiliate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Localize: Sign-up Form CSRF

Cross-site request forgery, also known as a one-click attack or session riding and abbreviated as CSRF or XSRF, is a type of malicious exploit of a website whereby unauthorized commands are transmitted from a user that the website trusts. Form action: http://www.localize.io/pages/signup Form...

Localize: HTML Form Without CSRF protection

Cross-site request forgery, also known as a one-click attack or session riding and abbreviated as CSRF or XSRF, is a type of malicious exploit of a website whereby unauthorized commands are transmitted from a user that the website trusts. Vulnerable Form- http://www.localize.io/ Form inputs:...

eazyCMS - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/66769/info eazyCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or...

Basecamp Back Online After DDoS, Extortion

The project management console Basecamp is back online and its developers are in the process of restoring customers’ network access Tuesday after the service was taken down by a distributed denial-of-service DDoS attack Monday. The attack started at 8:46 a.m. CST yesterday and flooded the site wi...

EaseUS Todo Backup 5.8.0.0 Hardcoded Password

Vulnerable Software: ======================================== EaseUS Todo Backup 5.8.0.0 build 20130321 http://oi62.tinypic.com/108i4ut.jpg ======================================== Vuln: Hardcoded Administrative Password./Potential backdoor. ======================================== Impact: An...

GNUBoard 4.3x - 'ajax.autosave.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/66228/info GNUboard is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...

BigACE 2.7.5 - LANGUAGE Directory Traversal

BigACE 2.7.5 - LANGUAGE Directory Traversal source: https://www.securityfocus.com/bid/66350/info BIGACE Web CMS is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these...

WordPress Plugin Relevanssi - 'category_name' SQL Injection

source: https://www.securityfocus.com/bid/65960/info Relevanssi plugin for WordPress is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

WordPress Plugin Relevanssi - category_name SQL Injection

WordPress Plugin Relevanssi - categoryname SQL Injection source: https://www.securityfocus.com/bid/65960/info Relevanssi plugin for WordPress is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Jorjweb - id SQL Injection

Jorjweb - id SQL Injection source: https://www.securityfocus.com/bid/66377/info Jorjweb is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the applicatio...

i-doit Pro - 'objID' SQL Injection

source: https://www.securityfocus.com/bid/65557/info i-doit Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Snapchat's new Security feature Hacked in 30 Minutes; CAPTCHA Cracking tool published

Snapchat suffered a massive data breach back in December in which 4.6 million usernames and phone numbers were compromised. Earlier this month, the company launched an update to its iOS and Android apps, added a new security measure to ensure that new users aren't spambots or a robot. While signi...

CVE-2014-0674

Cisco Video Surveillance Operations Manager VSOM does not require authentication for MySQL database connections, which allows remote attackers to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a client system with a crafted host nam...

XOS Shop - goto SQL Injection

XOS Shop - goto SQL Injection source: https://www.securityfocus.com/bid/65121/info XOS Shop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...