Basic Analysis and Security Engine Multiple Input Validation Vulnerabilities

Basic Analysis and Security Engine BASE is prone to multiple input- validation vulnerabilities because it fails to adequately sanitize user- supplied input. These vulnerabilities include an SQL-injection issue, a cross-site scripting issue, and a local file-include issue. Exploiting these issues...

OpenDocMan 1.2.5 - 'admin.php?last_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - 'toBePublished.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - search.php Cross-Site Scripting

OpenDocMan 1.2.5 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues cou...

OpenDocMan 1.2.5 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - 'department.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

PHP Live! 'deptid' Parameter SQL Injection Vulnerability

PHP Live! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Vastal I-Tech Cosmetics Zone - view_products.php SQL Injection

Vastal I-Tech Cosmetics Zone - viewproducts.php SQL Injection source: https://www.securityfocus.com/bid/36485/info Cosmetics Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Joomla! Component JoomlaFacebook - SQL Injection

source: https://www.securityfocus.com/bid/36484/info The JoomlaFacebook component 'comfacebook' for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Joomla! Component SportFusion 0.2.x - SQL Injection

Joomla! Component SportFusion 0.2.x - SQL Injection source: https://www.securityfocus.com/bid/36481/info The SportFusion component 'comsportfusion' for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Vastal I-Tech DVD Zone - 'view_mag.php' SQL Injection

source: https://www.securityfocus.com/bid/36487/info DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

WX-Guestbook 1.1.208 - SQL Injection HTML Injection

WX-Guestbook 1.1.208 - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/41741/info WX-Guestbook is prone to multiple SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage thes...

MyBB 1.4.8 - search.php SQL Injection

MyBB 1.4.8 - search.php SQL Injection source: https://www.securityfocus.com/bid/36460/info MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component com_pressrelease - id SQL Injection

Joomla! Component compressrelease - id SQL Injection source: https://www.securityfocus.com/bid/36351/info The 'compressrelease' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

tourismscripts HotelBook - hotel_id Multiple SQL Injections

tourismscripts HotelBook - hotelid Multiple SQL Injections source: https://www.securityfocus.com/bid/42975/info HotelBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

tourismscripts HotelBook - 'hotel_id' Multiple SQL Injections

source: https://www.securityfocus.com/bid/42975/info HotelBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

FlexCMS 2.5 - 'CookieUsername' Cookie SQL Injection

source: https://www.securityfocus.com/bid/36179/info FlexCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

FlexCMS 2.5 - CookieUsername Cookie SQL Injection

FlexCMS 2.5 - CookieUsername Cookie SQL Injection source: https://www.securityfocus.com/bid/36179/info FlexCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Tukanas Classifieds 1.0 - index.php SQL Injection

Tukanas Classifieds 1.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/43337/info Tukanas Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections

E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections source: https://www.securityfocus.com/bid/44229/info E-Gold Game Series: Pirates of The Caribbean is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it ...