OneWorldStore - 'DisplayResults.asp' SQL Injection

source: https://www.securityfocus.com/bid/13249/info OneWorldStore is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...

OneWorldStore - 'OWAddItem.asp' SQL Injection

source: https://www.securityfocus.com/bid/13181/info OneWorldStore is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Oracle 8.x9.x10.x Database - Multiple SQL Injections

Oracle 8.x9.x10.x Database - Multiple SQL Injections source: https://www.securityfocus.com/bid/13144/info Oracle database is reported prone to multiple SQL injection vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. These issues can be exploited using...

phpBB 1.x/2.0.x - Knowledge Base Module 'KB.php' SQL Injection

source: https://www.securityfocus.com/bid/13219/info Knowledge Base Module is affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromis...

phpBB 2.0.13 DLMan Pro Module - SQL Injection

phpBB 2.0.13 DLMan Pro Module - SQL Injection source: https://www.securityfocus.com/bid/13028/info The DLMan Pro mod for phpBB is reportedly affected by an SQL Injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an...

phpBB 2.0.13 Linkz Pro Module - SQL Injection

phpBB 2.0.13 Linkz Pro Module - SQL Injection source: https://www.securityfocus.com/bid/13030/info The Linkz Pro mod for phpBB is reportedly affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an...

ESMI PayPal StoreFront 1.7 - 'products1.php?id2' SQL Injection

source: https://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query. Successful exploitation could result in a compromise ...

ProjectBB 0.4.5.1 - Multiple SQL Injections

ProjectBB 0.4.5.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/12710/info ProjectBB is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to the application failing to properly sanitize user-supplied input before using it in SQL queries...

iGeneric iG Shop 1.x - Multiple SQL Injections

iGeneric iG Shop 1.x - Multiple SQL Injections source: https://www.securityfocus.com/bid/12627/info iGeneric iG Shop is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using them in SQL...

paFaq beta4 - search.php?search_item SQL Injection

paFaq beta4 - search.php?searchitem SQL Injection source: https://www.securityfocus.com/bid/12582/info paFaq is reportedly affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successfu...

IWebNegar - Multiple SQL Injections

source: https://www.securityfocus.com/bid/11946/info iWebNegar is reported prone to multiple SQL injection vulnerabilities, these issues exist due to a lack of sufficient boundary checks performed on user-supplied URI parameter data. These issues could theoretically be exploited to compromise the...

Internet Software Sciences Web+Center 4.0.1 - Cookie Object SQL Injection

source: https://www.securityfocus.com/bid/10771/info An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. This issue exists due to insufficient...

Invision Power Board 1.3 - SSI.php SQL Injection

Invision Power Board 1.3 - SSI.php SQL Injection source: https://www.securityfocus.com/bid/10511/info Invision Power Board is reported prone to an SQL injection vulnerability in its 'ssi.php' script. Due to improper filtering of user supplied data, 'ssi.php' is exploitable by attackers to pass SQ...

BBlog 0.7.4 - 'PostID' SQL Injection

source: https://www.securityfocus.com/bid/13398/info bBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the applicatio...

IGeneric Free Shopping Cart 1.4 - SQL Injection

IGeneric Free Shopping Cart 1.4 - SQL Injection source: https://www.securityfocus.com/bid/9771/info It has been reported that iGeneric Free Shopping Cart is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters...

IGeneric Free Shopping Cart 1.4 - SQL Injection

source: https://www.securityfocus.com/bid/9771/info It has been reported that iGeneric Free Shopping Cart is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters As a result of this issue a malicious user may...

Photopost PHP Pro photo Parameter SQL Injection

The version of Photopost PHP Pro installed on the remote host fails to sanitize user-supplied input to the 'photo' parameter of the 'showphoto.php' script before using it in a database query. An unauthenticated attacker may be able to exploit this issue to uncover sensitive information, modify...

InstaBoard 1.3 - index.cfm SQL Injection

InstaBoard 1.3 - index.cfm SQL Injection source: https://www.securityfocus.com/bid/7338/info It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the...

Snitz Forums 2000 3.x - members.asp SQL Injection

Snitz Forums 2000 3.x - members.asp SQL Injection source: https://www.securityfocus.com/bid/4558/info Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems. Snitz is back-ended by a database and supports Microsoft Access 97/2000, SQL Server 6.5/7.0/2000...

Snitz Forums 2000 3.x - 'members.asp' SQL Injection

source: https://www.securityfocus.com/bid/4558/info Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems. Snitz is back-ended by a database and supports Microsoft Access 97/2000, SQL Server 6.5/7.0/2000 and MySQL. It is possible for a remote attacker t...