Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/patch/index.php?level' Remote File Inclusion

source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

p.mapper 3.2 beta3 - pluginsexportmc_table.php?_SESSION[PM_INCPHP] Remote File Inclusion

p.mapper 3.2 beta3 - pluginsexportmctable.php?SESSIONPMINCPHP Remote File Inclusion source: https://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allo...

p.mapper 3.2 beta3 - '/plugins/export/mc_table.php?_SESSION[PM_INCPHP]' Remote File Inclusion

source: https://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

GOUAE DWD Realty - 'Password' SQL Injection

source: https://www.securityfocus.com/bid/26579/info DWD Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

JiRos Banner System 2.0 - login.asp Multiple SQL Injections

JiRos Banner System 2.0 - login.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/26479/info JiRo's Banner System is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

Computer Associates SiteMinder - Web Agent Smpwservices.FCC Cross-Site Scripting

source: https://www.securityfocus.com/bid/26375/info Computer Associates SiteMinder Web Agent is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows attackers to execute arbitrary HTML or script code in a user's...

phpfss-traverse.txt

PHP File Sharing System - Directory traversal +--------------------------------------------+ Author: Jonas Thambert Date: 2007-10-13 URL: http://sourceforge.net/projects/phpfilesadmin/ Vendor Notified. Version: 1.5.1 latest - Description - PHP File Sharing System is vulnerable to directory...

Scott Manktelow Design Stride 1.0 Courses - detail.php Multiple SQL Injections

Scott Manktelow Design Stride 1.0 Courses - detail.php Multiple SQL Injections source: https://www.securityfocus.com/bid/26036/info Stride 1.0 Courses is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Scott Manktelow Design Stride 1.0 - 'Content Management System main.php' SQL Injection

source: https://www.securityfocus.com/bid/26041/info Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

Content Builder 0.7.5 - postComment.php Remote File Inclusion

Content Builder 0.7.5 - postComment.php Remote File Inclusion source: https://www.securityfocus.com/bid/25914/info ContentBuilder CB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

BOINC 5.10.20 - text_search_action.php?search_string Cross-Site Scripting

BOINC 5.10.20 - textsearchaction.php?searchstring Cross-Site Scripting source: https://www.securityfocus.com/bid/25644/info BOINC Berkeley Open Infrastructure for Network Computing is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

AutoIndex PHP Script 2.2.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25448/info AutoIndex PHP Script is prone a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

VietPHP - adminindex.php?language Remote File Inclusion

VietPHP - adminindex.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise t...

Berthanas Ziyaretci Defteri 2.0 - 'Yonetici.asp' SQL Injection

source: https://www.securityfocus.com/bid/25109/info Berthanas Ziyaretci Defteri is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Metyus Forum Portal 1.0 - Philboard_Forum.asp SQL Injection

Metyus Forum Portal 1.0 - PhilboardForum.asp SQL Injection source: https://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Vikingboard 0.1.2 - topic.php Cross-Site Scripting

Vikingboard 0.1.2 - topic.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25056/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

TBDev.NET DR - TakeProfEdit.php HTML Injection

TBDev.NET DR - TakeProfEdit.php HTML Injection source: https://www.securityfocus.com/bid/24923/info TBDev.NET DR is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script...

Calendarix 0.7.20070307 - Multiple SQL Injections

Calendarix 0.7.20070307 - Multiple SQL Injections source: https://www.securityfocus.com/bid/24633/info Calendarix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Calendarix 0.7.20070307 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/24633/info Calendarix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

PHPAccounts 0.5 - index.php Multiple SQL Injections

PHPAccounts 0.5 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/24574/info PHP Accounts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...