PHPAccounts 0.5 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/24574/info PHP Accounts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Comersus Cart 7.0.7 - comersus_message.asp redirectUrl Cross-Site Scripting

Comersus Cart 7.0.7 - comersusmessage.asp redirectUrl Cross-Site Scripting source: https://www.securityfocus.com/bid/24562/info Comersus Cart is affected by multiple input validation vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data...

FipsCMS 2.1 - pid SQL Injection

FipsCMS 2.1 - pid SQL Injection source: https://www.securityfocus.com/bid/23850/info fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

E-Annu - home.php SQL Injection

E-Annu - home.php SQL Injection source: https://www.securityfocus.com/bid/23727/info E-Annu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHPMySpace Gold 8.10 - 'article.php' SQL Injection

source: https://www.securityfocus.com/bid/23602/info phpMySpace Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

NuclearBB Alpha 1 - Multiple SQL Injections

NuclearBB Alpha 1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/23555/info NuclearBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attack...

DropAFew 0.2 - search.php?delete Action id SQL Injection

DropAFew 0.2 - search.php?delete Action id SQL Injection source: https://www.securityfocus.com/bid/23400/info DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...

Tyger Bug Tracking System 1.1.3 - login.php?PATH_INFO Cross-Site Scripting

Tyger Bug Tracking System 1.1.3 - login.php?PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/22799/info Tyger Bug Tracking System is prone to multiple input-validation vulnerabilities, including one SQL-injection issue and two cross-site scripting issues, because the...

SpoonLabs Vivvo Article Management CMS 3.40 - Show_Webfeed.php SQL Injection

SpoonLabs Vivvo Article Management CMS 3.40 - ShowWebfeed.php SQL Injection source: https://www.securityfocus.com/bid/22282/info Vivvo Article Management CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL...

AdMentor - Admin Login SQL Injection

source: https://www.securityfocus.com/bid/22281/info AdMentor is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

SpoonLabs Vivvo Article Management CMS 3.40 - 'Show_Webfeed.php' SQL Injection

source: https://www.securityfocus.com/bid/22282/info Vivvo Article Management CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

CreateAuction - 'Cats.asp' SQL Injection

source: https://www.securityfocus.com/bid/21929/info Createauction is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

DMXReady Secure Login Manager 1.0 - members.asp?sent SQL Injection

DMXReady Secure Login Manager 1.0 - members.asp?sent SQL Injection source: https://www.securityfocus.com/bid/21788/info DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL...

DMXReady Secure Login Manager 1.0 - 'login.asp?sent' SQL Injection

source: https://www.securityfocus.com/bid/21788/info DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise t...

AppIntellect SpotLight CRM - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/21521/info AppIntellect SpotLight CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

DUClassmate 1.x - 'ICity' SQL Injection

source: https://www.securityfocus.com/bid/24637/info DUClassmate is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Aspee Ziyaretci Defteri - 'giris.asp' Multiple Field SQL Injections

source: https://www.securityfocus.com/bid/21398/info Aspee Ziyaretçi Defteri is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

uPhotoGallery 1.1 - thumbnails.asp?ci SQL Injection

uPhotoGallery 1.1 - thumbnails.asp?ci SQL Injection source: https://www.securityfocus.com/bid/21319/info uPhotoGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...

uPhotoGallery 1.1 - 'thumbnails.asp?ci' SQL Injection

source: https://www.securityfocus.com/bid/21319/info uPhotoGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access...

fipsShop - Multiple SQL Injections

fipsShop - Multiple SQL Injections source: https://www.securityfocus.com/bid/21289/info fipsShop is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...