MemHT Portal 4.0.1 Stored Cross Site Scripting Vulnerability

No description provided by source. Vulnerability ID: HTB22662 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinmemhtportal.html Product: MemHT Portal Vendor: Miltenovik Manojlo http://www.memht.com/ Vulnerable Version: 4.0.1 and probably prior versions Vendor Notification: 19 October...

Snom IP Phone Web Interface < 8 - Multiple Vulnerabilities

No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] ----------------------------------- Snom...

JGS-Portal 3.0.1/3.0.2 jgs_portal_beitraggraf.php year Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of...

Galerie 2.4 ShowGallery.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15313/info Galerie is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...

JGS-Portal 3.0.1/3.0.2 jgs_portal_mitgraf.php year Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of...

Polycom IP Phone Web Interface Data Diclosure Vulnerability

No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...

MyBB Member.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14684/info MyBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation could result in a compromise of the...

Help Center Live 1.0/1.2.x Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13666/info Help Center Live is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Reportedly the application is affected by...

Land Down Under 700/701/800/801 list.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14685/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

Land Down Under 700/701/800/801 index.php c Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14685/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

JGS-Portal 3.0.1/3.0.2 jgs_portal_viewsgraf.php tag Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of...

OneWorldStore OWProductDetail.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13183/info OneWorldStore is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could...

Elemental Software CartWIZ 1.20 Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/14180/info CartWIZ is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation...

InTouch 0.5.1 Alpha User Variable SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16110/info inTouch is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...

PluggedOut Blog 1.9.x Index.PHP Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15746/info PluggedOut Blog is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

BEdita 3.0.1.2550 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22729 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinbedita.html Product: BEdita Vendor: Chialab & ChannelWeb http://www.bedita.com/ Vulnerable Version: 3.0.1.2550 betula and probably prior versions Vendor Notification: 30 November 201...

ASPMForum forum.asp baslik Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15767/info ASPMForum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitati...

ScozNet ScozBook 1.1 AdminName Variable SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16115/info ScozNet ScozBook is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

PHPDug 2.0.0 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22971 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpdug.html Product: PHPDug Vendor: Kubelabs.com http://www.kubelabs.com/ Vulnerable Version: 2.0.0 and probably prior versions Vendor Notification: 21 April 2011 Vulnerability Type:...

Simple Text-File Login script 1.0.6 - (DD/RFI) Multiple Vulnerabilities

No description provided by source. START 0x01 Informations: Script : Simple Text-File Login script 1.0.6 Download : http://www.hotscripts.com/jump.php?listingid=36777&jumptype=1 Vulnerability : Remote File Inclusion / Sensitive Data Disclosure Author : Osirys Contact : osirysatlivedotit Notes :...