Land Down Under 700/701/800/801 - 'index.php?c' SQL Injection

source: https://www.securityfocus.com/bid/14685/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromi...

Land Down Under 700/701/800/801 - 'events.php?c' SQL Injection

source: https://www.securityfocus.com/bid/14685/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromi...

PostNuke 0.750.76 DL - viewdownload.php SQL Injection

PostNuke 0.750.76 DL - viewdownload.php SQL Injection source: https://www.securityfocus.com/bid/14636/info PostNuke is prone to an SQL injection vulnerability. This issue is due to a lack of sufficient sanitization of user-supplied input. Successful exploitation could result in a compromise of th...

PostNuke 0.75/0.76 DL - 'viewdownload.php' SQL Injection

source: https://www.securityfocus.com/bid/14636/info PostNuke is prone to an SQL injection vulnerability. This issue is due to a lack of sufficient sanitization of user-supplied input. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or...

jPORTAL 2.2.12.3.1 - download.php SQL Injection

jPORTAL 2.2.12.3.1 - download.php SQL Injection source: https://www.securityfocus.com/bid/14926/info JPortal is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

jPORTAL 2.2.1/2.3.1 - 'download.php' SQL Injection

source: https://www.securityfocus.com/bid/14926/info JPortal is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Mall23 - 'AddItem.asp' SQL Injection

source: https://www.securityfocus.com/bid/14898/info Mall23 is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the application, disclosure or...

Woltlab Burning Board 2.x - ModCP.php SQL Injection

Woltlab Burning Board 2.x - ModCP.php SQL Injection source: https://www.securityfocus.com/bid/14617/info Woltlab Burning Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Woltlab Burning Board 2.x - 'ModCP.php' SQL Injection

source: https://www.securityfocus.com/bid/14617/info Woltlab Burning Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

PHPFreeNews 1.40 - searchresults.php Multiple SQL Injections

PHPFreeNews 1.40 - searchresults.php Multiple SQL Injections source: https://www.securityfocus.com/bid/14589/info PHPFreeNews is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

PHPFreeNews 1.40 - 'searchresults.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/14589/info PHPFreeNews is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise o...

PersianBlog - 'Userslist.asp' SQL Injection

source: https://www.securityfocus.com/bid/14575/info PersianBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

MyBulletinBoard (MyBB) RC4 - Username SQL Injection

MyBulletinBoard MyBB RC4 - Username SQL Injection source: https://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

MyBulletinBoard (MyBB) RC4 - 'polloptions' SQL Injection

source: https://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise...

MyBulletinBoard (MyBB) RC4 - polloptions SQL Injection

MyBulletinBoard MyBB RC4 - polloptions SQL Injection source: https://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

TriggerTG TClanPortal 3.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/14516/info TClanPortal is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise o...

Gravity Board X 1.1 - Login SQL Injection

source: https://www.securityfocus.com/bid/14497/info Gravity Board X GBX is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...

PHP-Fusion 4.0/5.0/6.0 - 'messages.php' SQL Injection

source: https://www.securityfocus.com/bid/14489/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'messages.php' script before using it in an SQL query. Successful exploitation could result...

Easyxp41.txt

XSS flaws and data disclosure in Easyxp41 XSS flaws and data dliclosure in Easyxp41 vendor url: http://www.easypx41.be/ advisory: http://falcondeoro.blogspot.com/2005/07/ xss-flaws-and-data-disclosure-in.html vendor notify: Yes exploit available: Yes Easyxp41 es a free script to make web portal.Y...

kshoutaxs.txt

=========================================================== ============================================================ Title: Kshout Data Disclosure Vulnerability Discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 26/07/2005 Severity: Medium. Remote users can view...