Joomla! Component Sexy polling 1.0.8 - answer_id SQL Injection

Joomla! Component Sexy polling 1.0.8 - answerid SQL Injection source: https://www.securityfocus.com/bid/64991/info Sexy polling extension for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Joomla! Component Sexy polling 1.0.8 - 'answer_id' SQL Injection

source: https://www.securityfocus.com/bid/64991/info Sexy polling extension for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections source: https://www.securityfocus.com/bid/65029/info Dell Kace 1000 Systems Management Appliance is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input befor...

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/65029/info Dell Kace 1000 Systems Management Appliance is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to...

Command School Student Management System - '/sw/admin_titles.php?id' SQL Injection

source: https://www.securityfocus.com/bid/64707/info Command School Student Management System is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. A cross-site request forgery vulnerability 3. A cross-site scripting vulnerability 4. An HTML injection...

Command School Student Management System - '/sw/admin_school_names.php?id' SQL Injection

source: https://www.securityfocus.com/bid/64707/info Command School Student Management System is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. A cross-site request forgery vulnerability 3. A cross-site scripting vulnerability 4. An HTML injection...

Command School Student Management System - swadmin_terms.php?id SQL Injection

Command School Student Management System - swadminterms.php?id SQL Injection source: https://www.securityfocus.com/bid/64707/info Command School Student Management System is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. A cross-site request forgery...

Dredge School Administration System - DSMBackupprocessbackup.php Database Backup Information Disclosure

Dredge School Administration System - DSMBackupprocessbackup.php Database Backup Information Disclosure source: https://www.securityfocus.com/bid/64720/info Dredge School Administration System is prone to the following security vulnerabilities: 1. An SQL-injection vulnerability 2. A cross-site...

NeoBill - installincludesolidstate.php Multiple SQL Injections

NeoBill - installincludesolidstate.php Multiple SQL Injections source: https://www.securityfocus.com/bid/64112/info NeoBill is prone to multiple security vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the...

Course Registration Management System - Cross-Site Scripting SQL Injection

Course Registration Management System - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/63435/info Course Registration Management System is prone to multiple cross-site scripting and multiple SQL-injection vulnerabilities because it fails to properly sanitize...

LinkedIn Join Group Cross Site Request Forgery

============================================= INTERNET SECURITY AUDITORS ALERT 2013-016 - Original release date: June 8th, 2013 - Last revised: July 11th, 2013 - Discovered by: Eduardo Garcia Melia - Severity: 4.3/10 CVSSv2 Base Score ============================================= I. VULNERABILITY...

Ziteman CMS - Login Page SQL Injection

Ziteman CMS - Login Page SQL Injection source: https://www.securityfocus.com/bid/62949/info Ziteman CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an attacker to...

Western Digital Arkeia Appliance 10.0.10 - Multiple Vulnerabilities

Exploit for php platform in category web applications Arkeia Appliance v10.0.10 is prone to 2 security vulnerabilties: 1 Unauthenticated firmware upload There are no restrictions when a POST request is send to http:///scripts/upload.php thus allowing any unauthenticated client to upload any data ...

2 Million Customer Records Stolen in Vodafone Germany breach

Security experts are warning Vodafone customers, particularly those in Germany, of a possible increase in phishing attacks after an insider at the telecommunications giant accessed a database and stole personal information on as many as two million customers. German police have a suspect, adding...

dBlog CMS - m SQL Injection

dBlog CMS - m SQL Injection source: https://www.securityfocus.com/bid/62146/info dBlog CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

SearchBlox contains multiple vulnerabilities

Overview SearchBlox contains multiple vulnerabilities that can allow an unauthenticated attacker to overwrite critical data on the filesystem, read cleartext user credentials, or execute arbitrary code on a vulnerable system. Description SearchBlox versions 7.4 Build 1 and older contain multiple...

AlgoSec Firewall Analyzer 6.4 Cross Site Scripting

================================================================================================================================================================ AlgoSec Firewall Analyzer Version v6.4 cross-site scripting XSS Vulnerability...

Kwok Information Server - Multiple SQL Injections

Kwok Information Server - Multiple SQL Injections source: https://www.securityfocus.com/bid/61728/info Kwok Information Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may...

Kwok Information Server - Multiple SQL Injections

source: https://www.securityfocus.com/bid/61728/info Kwok Information Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application,...

Microsoft's Social network Yammer vulnerable to OAuth Bypass hack

Yammer, is the Enterprise Social Network service that was launched in 2008 and sold to Microsoft in 2012. Yammer is a secure, private social network for your company. Yammer is used for private communication within organizations or between organizational members and pre-designated groups, making ...