Messageriescripthp 2.0 - lire-avis.php?aa SQL Injection

Messageriescripthp 2.0 - lire-avis.php?aa SQL Injection source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied...

TorrentFlux 2.2 (maketorrent.php) Remote Command Execution Exploit

No description provided by source. The variable announce in maketorrent.php is not sanitised before being used. The announce variable goes through various stages throughout the script, then it is passed as a into an exec function. This occurs in the middle of the string which is passed to the exe...

Messageriescripthp 2.0 - 'lire-avis.php?aa' SQL Injection

source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Dol Storye - 'Dettaglio.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21463/info The 'dol storye' application is prone to multiple SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

uPhotoGallery 1.1 - Slideshow.asp?ci SQL Injection

uPhotoGallery 1.1 - Slideshow.asp?ci SQL Injection source: https://www.securityfocus.com/bid/21319/info uPhotoGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...

Click Gallery - Multiple Input Validation Vulnerabilities

Click Gallery - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/21311/info Click Gallery is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently saniti...

uPhotoGallery 1.1 - 'thumbnails.asp?ci' SQL Injection

source: https://www.securityfocus.com/bid/21319/info uPhotoGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access...

Gnews Publisher - Multiple SQL Injections

Gnews Publisher - Multiple SQL Injections source: https://www.securityfocus.com/bid/21194/info Gnews Publisher is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Klf-Realty 2.0 - 'detail.asp?property_id' SQL Injection

source: https://www.securityfocus.com/bid/21199/info Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

ASPCart 4.5 - Multiple SQL Injections

ASPCart 4.5 - Multiple SQL Injections source: https://www.securityfocus.com/bid/21152/info ASPCart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

ASPIntranet 2.1 - default.asp SQL Injection

ASPIntranet 2.1 - default.asp SQL Injection source: https://www.securityfocus.com/bid/21061/info ASPIntranet is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

FunkyASP Glossary 1.0 - 'Glossary.asp' SQL Injection

source: https://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Bitweaver 1.x - '/wiki/orphan_pages.php?sort_mode' SQL Injection

source: https://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials...

Easy Web Portal 2.1.2 - Multiple Remote File Inclusions

Easy Web Portal 2.1.2 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/20825/info Easy Web Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

Freenews 1.1 - 'Aff_News.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20795/info Freenews is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

Mambo Module MOStlyCE 4.5.4 - 'HTMLTemplate.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20549/info Mambo MostlyCE is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks ar...

phpBB Add Name Module - Not_Mem.php Remote File Inclusion

phpBB Add Name Module - NotMem.php Remote File Inclusion source: https://www.securityfocus.com/bid/20516/info The Add Name component for phpBB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacke...

Bloq 0.5.4 - '/files/mainfile.php?page[path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks a...

phpBB Add Name Module - 'Not_Mem.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20516/info The Add Name component for phpBB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system...

WikyBlog 1.2.x - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20350/info WikyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...