TCExam 11.2.x - admincodetce_edit_question.php?subject_module_id SQL Injection

TCExam 11.2.x - admincodetceeditquestion.php?subjectmoduleid SQL Injection source: https://www.securityfocus.com/bid/54861/info TCExam is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

WordPress Theme ShopperPress - SQL Injection Cross-Site Scripting

WordPress Theme ShopperPress - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/55062/info The ShopperPress WordPress theme is prone to an SQL-injection and multiple cross-site vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploi...

tekno.Portal 0.1b - link.php SQL Injection

tekno.Portal 0.1b - link.php SQL Injection source: https://www.securityfocus.com/bid/54786/info tekno.Portal is prone to an SQL-injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

ManageEngine Applications Manager - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/54759/info ManageEngine Applications Manager is prone to multiple SQL-injection and multiple cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the...

Limny - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/54753/info Limny is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...

phpBB - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54734/info phpBB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

Elite Bulletin Board - Multiple SQL Injections

Elite Bulletin Board - Multiple SQL Injections source: https://www.securityfocus.com/bid/54452/info Elite Bulletin Board is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

Elite Bulletin Board - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54452/info Elite Bulletin Board is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Classified Ads Script PHP - admin.php Multiple SQL Injections

Classified Ads Script PHP - admin.php Multiple SQL Injections source: https://www.securityfocus.com/bid/54299/info Classified Ads Script PHP is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Cotonti - admin.php SQL Injection

Cotonti - admin.php SQL Injection source: https://www.securityfocus.com/bid/54147/info Cotonti is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromis...

Funeral Script PHP - Cross-Site Scripting SQL Injection

Funeral Script PHP - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/54402/info Funeral Script PHP is prone to multiple cross-site scripting vulnerabilities and multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied...

Code injection

The Single Sign On Client ubuntu-sso-client for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle MITM attack...

Simple Forum PHP - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54024/info Simple Forum PHP is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Simple Forum PHP - Multiple SQL Injections

Simple Forum PHP - Multiple SQL Injections source: https://www.securityfocus.com/bid/54024/info Simple Forum PHP is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

KBPublisher Multiple Vulnerabilities

KBPublisher is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MyBB 1.6.8 - 'member.php' SQL Injection

source: https://www.securityfocus.com/bid/53814/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...

Bigware Shop 2.1x - 'main_bigware_54.php' SQL Injection

source: https://www.securityfocus.com/bid/53810/info Bigware Shop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the application, access or modify...

shopxp online shopping system v7. 4 SQL injection vulnerability-vulnerability warning-the black bar safety net

Keywords: inurl:shopxpnews. asp Injected code: TEXTBOX2. ASP? action=modify&news%69d=1 2 2%20and%2 0 1=2%20union%20select%201,2,admin%2bpassword,4,5,6,7%20from%20shopxpadmin Broke the user name and password note: username and password are connected together, after the sixth bit is the password MD...

Bigware Shop 2.1x - main_bigware_54.php SQL Injection

Bigware Shop 2.1x - mainbigware54.php SQL Injection source: https://www.securityfocus.com/bid/53810/info Bigware Shop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacke...

Cells Blog CMS v1.1 - Multiple Web Vulnerabilities

Document Title: =============== Cells Blog CMS v1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=591 Release Date: ============= 2012-06-04 Vulnerability Laboratory ID VL-ID: ==================================== 591 Comm...