AuraCMS 2.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications Advisory Details: High-Tech Bridge Security Research Lab discovered two SQL injection vulnerabilities in AuraCMS, which can be exploited to alter SQL queries and execute arbitrary SQL commands in application's database. 1 Multiple SQL Injectio...

UAEPD Shopping Script - 'news.php?id' SQL Injection

source: https://www.securityfocus.com/bid/64734/info UAEPD Shopping Cart Script is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit these issues by manipulating the SQL query logi...

Juniper Networks Junos OS OSPF Protocol Vulnerability

A vulnerability in the OSPF protocol allows a remote attacker to insert, update or delete routes in the OSPF database. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WordPress NOSpamPTI 2.1 Blind SQL Injection

NOSpamPTI Wordpress plugin Blind SQL Injection Vendor product description NOSpamPTI eliminates the spam in your comment box so strong and free, developed from the idea of Nando Vieira http://bit.ly/d38gB8, but some themes do not support changes to the functions.php to this we alter this function...

Kingcms 未明SQL注入漏洞

Kingcms是一款内容管理系统 Kingcms存在一个未明SQL注入漏洞，允许远程攻击者利用漏洞提交特制的SQL查询，可获取或操作数据库信息 0 Kingcms 厂商解决方案 目前没有详细解决方案提供： http://www.kingcms.com...

LeagueManager Plugin for WordPress 'wp-admin/admin.php' 'league_id' Parameter SQL Injection

The WordPress LeagueManager plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'leagueid' parameter of the '/wp-admin/admin.php' script. A remote, unauthenticated attacker can leverage this issue to...

Cotonti 'c' Parameter SQL Injection Vulnerability

Cotonti is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Symantec Web Gateway Security Issues

SUMMARY Symantec's Web Gateway SWG Appliance management console is susceptible to security issues. Successful exploitation could result in unauthorized command execution on or access to the management console, or the appliance itself. There is also potential for unauthorized database manipulation...

Symantec Security Information Manager Console Security Issues

SUMMARY Symantec's Security Information Manager SSIM management console is susceptible to multiple security issues. Successful exploitation could result in potential cookie stealing, session hijacking, unauthorized disclosure of sensitive application information and potential for unauthorized...

Wordpress Level Four Storefront Plugin SQL Injection Vulnerability

This host is installed with Wordpress Level Four Storefront Plugin and is prone to sql injection vulnerability. OpenVAS Vulnerability Test $Id: gbwordpresslevelfourstorefrontsqlinjvuln.nasl 6115 2017-05-12 09:03:25Z teissa $ Wordpress Level Four Storefront Plugin SQL Injection Vulnerability...

The copper plate while the net mass mailing statistics system v1. 2 vulnerability-vulnerability warning-the black bar safety net

'Fenlei. asp IF Request. QueryString"Action"="del" Then ID=Request. QueryString"ID" IF Countss "tui","Fenlei",ID 0 then 'Slightly IF Request. QueryString"Action"="Add" Then Tname=Request. Form"Typename" Set Rs=Server. CreateObject"adodb. Recordset" Sql="Select From Fenlei Order by id Desc" Rs. Op...

SQL Injection

ActiveRecord-JDBC-Adapter AR-JDBC contains a flaw that may allow carrying out an SQL injection attack. The issue is due to the sql.gsub function in lib/arjdbc/jdbc/adapter.rb not properly sanitizing user-supplied input before using it in SQL queries. This may allow a remote attacker to inject or...

PT-2012-2211

Name of the Vulnerable Software and Affected Versions Social Network Community 2 affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the userId parameter in the "user.php" file. This can lead to unauthorized access and manipulation o...

PT-2012-2192

Name of the Vulnerable Software and Affected Versions Video Community Portal affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the "index.php" file. This can lead to unauthorized access and manipulation of...

PT-2012-5932

Name of the Vulnerable Software and Affected Versions Pre Printing Press affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the "page.php" file. This can lead to unauthorized access and manipulation of database...

PT-2012-5890

Name of the Vulnerable Software and Affected Versions Posse Softball Director CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the idteam parameter in the team.php file. This can lead to unauthorized access and manipulation of...

phpBB - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54734/info phpBB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

PT-2012-3172

Name of the Vulnerable Software and Affected Versions Segue versions 2.2.10.2 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This can potentially lead to unauthorized access or manipulation of database content. Recommendations...

PT-2012-3433

Name of the Vulnerable Software and Affected Versions e-ticketing affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the password parameter in the loginscript.php file. This can lead to unauthorized access and manipulation of databa...

phpDenora 1.4.6 SQL Injection

Title : phpDenora = 1.4.6 Multiple SQL Injection Vulnerabilities Author : P. de Brouwer - KnickLighter @knickz0r NLSecurity - www.nlsecurity.org [email protected] Dork : intext:"Powered by phpDenora" Software : phpDenora = 1.4.6 http://sourceforge.net/projects/phpdenora/files/phpDenora/1.4.6/...