Escortservice <= 1.0 SQLi Vulnerability

Escortservice is prone to an SQL injection SQLi vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Escortservice 1.0 - 'custid' SQL Injection

source: https://www.securityfocus.com/bid/46171/info Escortservice is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

Joomla! Component com_clan_members - id SQL Injection

Joomla! Component comclanmembers - id SQL Injection source: https://www.securityfocus.com/bid/46080/info The 'comclanmembers' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

mediawiki -- multiple vulnerabilities

Medawiki reports: An arbitrary script inclusion vulnerability was discovered. The vulnerability only allows execution of files with names ending in ".php" which are already present in the local filesystem. Only servers running Microsoft Windows and possibly Novell Netware are affected. Despite...

All In One Control Panel 1.4.1 - cp_menu_data_file.php SQL Injection

All In One Control Panel 1.4.1 - cpmenudatafile.php SQL Injection source: https://www.securityfocus.com/bid/46097/info All In One Control Panel AIOCP is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. ...

PHPAuctions 'viewfaqs.php' SQLi Vulnerability - Active Check

PHPAuctions is prone to an SQL injection SQLi vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

11 Websites hacked by team Jmc H4x0rs !

11 Websites hacked by team Jmc H4x0rs ! Hacked Sites : https://tronix.se/oscommerce2st/catalog/images/jmcc.html https://www.colecionismo.com.br/loja/images/jmcc.html https://danawa.jp/images/jmcc.html https://www.solarinformatica.com.ar/catalog/images/jmcc.html...

Advanced Webhost Billing System (AWBS) 2.9.2 - 'oid' SQL Injection

source: https://www.securityfocus.com/bid/45827/info Advanced Webhost Billing System AWBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or...

CMS Tovar - tovar.php SQL Injection

CMS Tovar - tovar.php SQL Injection source: https://www.securityfocus.com/bid/45772/info CMS Tovar is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

WikLink 0.1.3 - Multiple SQL Injections

WikLink 0.1.3 - Multiple SQL Injections source: https://www.securityfocus.com/bid/45731/info WikLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

WikLink 0.1.3 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/45731/info WikLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acces...

DeKalb website hacked !

It appeared briefly this week that all DeKalb County's properties were owned by a hacker. The county's property appraisal website was hacked and listed every property owner as "Hacked by Red xD," CEO's spokesman Burke Brennan confirmed for The Atlanta Journal-Constitution. Brennan insisted none o...

OpenEMR <= 3.2.0 Multiple Input Validation Vulnerabilities

OpenEMR is prone to SQL injection SQLi, HTML injection, and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

KLINK - SQL Injection

KLINK - SQL Injection Andr�s G�mez Exploit Title : KLINK Sql Injection Vulnerability Date : 2010-12-31 Author : Andr�s G�mez Software Developed by : http://www.contacto.com Contact : [email protected] Dork : "allinurl:.php?txtCodiInfo=" An attacker may execute arbitrary SQL statements on...

MyBB 1.6 - search.php?keywords SQL Injection

MyBB 1.6 - search.php?keywords SQL Injection source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker t...

MyBB 1.6 - private.php?keywords SQL Injection

MyBB 1.6 - private.php?keywords SQL Injection source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker ...

Social Share - Username SQL Injection

Social Share - Username SQL Injection source: https://www.securityfocus.com/bid/45536/info Social Share is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker t...

Social Share - postid SQL Injection

Social Share - postid SQL Injection source: https://www.securityfocus.com/bid/45497/info Social Share is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Mafya Oyun Scrpti - 'profil.php' SQL Injection

source: https://www.securityfocus.com/bid/45501/info Mafya Oyun Scrpti is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...

Cross Site Scripting vulnerability in Diferior

Vulnerability ID: HTB22722 Reference: http://www.htbridge.ch/advisory/crosssitescriptingvulnerabilityindiferior.html Product: Diferior Vendor: Povilas Musteikis http://www.diferior.com/ Vulnerable Version: 8.03 and probably prior versions Vendor Notification: 25 November 2010 Vulnerability Type:...