PHPKit 1.6.1 - popup.php SQL Injection

PHPKit 1.6.1 - popup.php SQL Injection source: https://www.securityfocus.com/bid/20911/info PHPKIT is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Evandor Easy notesManager 0.0.1 - login.php?Username SQL Injection

Evandor Easy notesManager 0.0.1 - login.php?Username SQL Injection source: https://www.securityfocus.com/bid/20803/info Easy notesManager is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful explo...

Evandor Easy notesManager 0.0.1 - Search Page SQL Injection

Evandor Easy notesManager 0.0.1 - Search Page SQL Injection source: https://www.securityfocus.com/bid/20803/info Easy notesManager is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit coul...

Snitz Forums 2000 3.4.6 - Pop_Mail.asp SQL Injection

Snitz Forums 2000 3.4.6 - PopMail.asp SQL Injection source: https://www.securityfocus.com/bid/20712/info Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Emek Portal 2.1 - Uyegiris.asp SQL Injection

Emek Portal 2.1 - Uyegiris.asp SQL Injection source: https://www.securityfocus.com/bid/20378/info Emek Portal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

AckerTodo 4.2 - 'login.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/20372/info ackerTodo is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, acce...

Emek Portal 2.1 - 'Uyegiris.asp' SQL Injection

source: https://www.securityfocus.com/bid/20378/info Emek Portal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

CubeCart 3.0.x - view_order.php?order_id Cross-Site Scripting

CubeCart 3.0.x - vieworder.php?orderid Cross-Site Scripting source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to...

CubeCart 3.0.x - footer.inc.php?la_pow_by Cross-Site Scripting

CubeCart 3.0.x - footer.inc.php?lapowby Cross-Site Scripting source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to...

CubeCart 3.0.x - adminprint_order.php?order_id SQL Injection

CubeCart 3.0.x - adminprintorder.php?orderid SQL Injection source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to proper...

vBulletin 2.3.x - 'global.php' SQL Injection

source: https://www.securityfocus.com/bid/20214/info vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

CubeCart 3.0.x - 'view_order.php?order_id' SQL Injection

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...

EShoppingPro 1.0 - Search_Run.asp SQL Injection

EShoppingPro 1.0 - SearchRun.asp SQL Injection source: https://www.securityfocus.com/bid/20089/info EShoppingPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. An attacker may be able to exploit th...

ECardPro 2.0 - 'search.asp' SQL Injection

source: https://www.securityfocus.com/bid/20080/info ECardPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

ZilekPortal 1.0 - Haberdetay.asp SQL Injection

ZilekPortal 1.0 - Haberdetay.asp SQL Injection source: https://www.securityfocus.com/bid/20062/info ZilekPortal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

ZilekPortal 1.0 - 'Haberdetay.asp' SQL Injection

source: https://www.securityfocus.com/bid/20062/info ZilekPortal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Jupiter CMS 1.1.4/1.1.5 - '/modules/search.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20048/info Jupiter CMSA is prone to multiple input-validation vulnerabilities, including cross-site scripting, SQL-injection, and arbitrary file-upload issues, because the application fails to sanitize user-supplied input. A successful exploit of these...

DCP-Portal 6.0 - '/admin/inc/footer.inc.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of the...

PHP-Fusion 6.0.x - news.php SQL Injection

PHP-Fusion 6.0.x - news.php SQL Injection source: https://www.securityfocus.com/bid/19908/info PHP-Fusion is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...

osCommerce 2.12.2 - product_info.php SQL Injection

osCommerce 2.12.2 - productinfo.php SQL Injection source: https://www.securityfocus.com/bid/19774/info osCommerce is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...