Rapid-Source Rapid-Recipe Component - Multiple SQL Injections

Rapid-Source Rapid-Recipe Component - Multiple SQL Injections source: https://www.securityfocus.com/bid/27724/info Rapid-Recipe is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues...

Simple OS CMS 0.1c_beta - login.php SQL Injection

Simple OS CMS 0.1cbeta - login.php SQL Injection source: https://www.securityfocus.com/bid/27589/info Simple OS CMS is prone to an SQL-injection vulnerability because it fails to adequately sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, acce...

SocialURL Login Page Cross-Site Scripting

Overview: SocialURL is a social community platform enabling you to organize your online identities. Connnect to all your social network sites with one URL. SocialURL fails to sufficiently sanitize user-supplied input data via login box. Class: Input Validation Error Example:...

SynCE 0.92 - vdccm Daemon Remote Command Injection

SynCE 0.92 - vdccm Daemon Remote Command Injection source: https://www.securityfocus.com/bid/27178/info SynCE is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Attackers can exploit this issue to execute arbitrary commands in th...

NetBizCity FaqMasterFlexPlus - faq.php SQL Injection

NetBizCity FaqMasterFlexPlus - faq.php SQL Injection source: https://www.securityfocus.com/bid/27052/info FaqMasterFlexPlus is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Black Sheep Web Software Form Tools 1.5 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/26889/info Black Sheep Web Software Form Tools is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

E-Xoops 1.0.51.0.8 - mysectionsratefile.php?lid SQL Injection

E-Xoops 1.0.51.0.8 - mysectionsratefile.php?lid SQL Injection source: https://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/patch/index.php?level' Remote File Inclusion

source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Ossigeno CMS 2.2_pre1 - uploadxaxossigenoadmininstall_module.php?level Remote File Inclusion

Ossigeno CMS 2.2pre1 - uploadxaxossigenoadmininstallmodule.php?level Remote File Inclusion source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issu...

p.mapper 3.2 beta3 - pluginsexportmc_table.php?_SESSION[PM_INCPHP] Remote File Inclusion

p.mapper 3.2 beta3 - pluginsexportmctable.php?SESSIONPMINCPHP Remote File Inclusion source: https://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allo...

p.mapper 3.2 beta3 - '/plugins/export/mc_table.php?_SESSION[PM_INCPHP]' Remote File Inclusion

source: https://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

GOUAE DWD Realty - 'Password' SQL Injection

source: https://www.securityfocus.com/bid/26579/info DWD Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

JiRos Banner System 2.0 - login.asp Multiple SQL Injections

JiRos Banner System 2.0 - login.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/26479/info JiRo's Banner System is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

Computer Associates SiteMinder - Web Agent Smpwservices.FCC Cross-Site Scripting

source: https://www.securityfocus.com/bid/26375/info Computer Associates SiteMinder Web Agent is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows attackers to execute arbitrary HTML or script code in a user's...

phpfss-traverse.txt

PHP File Sharing System - Directory traversal +--------------------------------------------+ Author: Jonas Thambert Date: 2007-10-13 URL: http://sourceforge.net/projects/phpfilesadmin/ Vendor Notified. Version: 1.5.1 latest - Description - PHP File Sharing System is vulnerable to directory...

Scott Manktelow Design Stride 1.0 Courses - detail.php Multiple SQL Injections

Scott Manktelow Design Stride 1.0 Courses - detail.php Multiple SQL Injections source: https://www.securityfocus.com/bid/26036/info Stride 1.0 Courses is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Scott Manktelow Design Stride 1.0 - 'Content Management System main.php' SQL Injection

source: https://www.securityfocus.com/bid/26041/info Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

Content Builder 0.7.5 - postComment.php Remote File Inclusion

Content Builder 0.7.5 - postComment.php Remote File Inclusion source: https://www.securityfocus.com/bid/25914/info ContentBuilder CB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

BOINC 5.10.20 - text_search_action.php?search_string Cross-Site Scripting

BOINC 5.10.20 - textsearchaction.php?searchstring Cross-Site Scripting source: https://www.securityfocus.com/bid/25644/info BOINC Berkeley Open Infrastructure for Network Computing is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

AutoIndex PHP Script 2.2.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25448/info AutoIndex PHP Script is prone a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...