WebCalendar 1.0.1 - Multiple SQL Injections

WebCalendar 1.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15662/info WebCalendar is prone to multiple SQL injection vulnerabilities. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic o...

WebCalendar 1.0.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15662/info WebCalendar is prone to multiple SQL injection vulnerabilities. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation cou...

PDJK-support Suite 1.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15598/info PDJK-support Suite is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful...

AFFCommerce Shopping Cart 1.1.4 - subcategory.php?cl SQL Injection

AFFCommerce Shopping Cart 1.1.4 - subcategory.php?cl SQL Injection source: https://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries,...

AFFCommerce Shopping Cart 1.1.4 - 'ItemInfo.php?item_id' SQL Injection

source: https://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. AFFCommerc...

FreeForum 1.0/1.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15559/info freeForum is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation...

AFFCommerce Shopping Cart 1.1.4 - ItemInfo.php?item_id SQL Injection

AFFCommerce Shopping Cart 1.1.4 - ItemInfo.php?itemid SQL Injection source: https://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries,...

AFFCommerce Shopping Cart 1.1.4 - 'subcategory.php?cl' SQL Injection

source: https://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. AFFCommerc...

AFFCommerce Shopping Cart 1.1.4 - 'ItemReview.php?item_id' SQL Injection

source: https://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. AFFCommerc...

Exponent CMS < 0.96.4 Multiple Remote Vulnerabilities (XSS, SQLi, Code Exe, Disc)

The remote host is running Exponent CMS, an open source content management system written in PHP. The version of Exponent CMS installed on the remote host fails to sanitize input to the 'id' parameter of the resource module before using it in database queries. An unauthenticated attacker can...

phpWebThings Multiple Scripts SQL Injection

The remote host is running the phpWebThings application framework. The version of phpWebThings installed on the remote host does not properly sanitize user input in the 'forum' and 'msg' parameters of 'forum.php' script before using it in database queries. An attacker can exploit this vulnerabili...

IPBProArcade 2.5.2 - GameID SQL Injection

IPBProArcade 2.5.2 - GameID SQL Injection source: https://www.securityfocus.com/bid/15205/info A remote SQL injection vulnerability reportedly affects ipbProArcade. The problem affects the 'gameid' parameter. An attacker may leverage this issue to manipulate SQL query strings and potentially carr...

IPBProArcade 2.5.2 - 'GameID' SQL Injection

source: https://www.securityfocus.com/bid/15205/info A remote SQL injection vulnerability reportedly affects ipbProArcade. The problem affects the 'gameid' parameter. An attacker may leverage this issue to manipulate SQL query strings and potentially carry out arbitrary database queries. This may...

MyBulletinBoard (MyBB) 1.0 - usercp.php SQL Injection

MyBulletinBoard MyBB 1.0 - usercp.php SQL Injection source: https://www.securityfocus.com/bid/15204/info MyBulletinBoard is prone to an SQL injection vulnerability. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query log...

Nuked-klaN 1.7 Sections Module - artid SQL Injection

Nuked-klaN 1.7 Sections Module - artid SQL Injection source: https://www.securityfocus.com/bid/15181/info Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

Nuked-klaN 1.7 Links Module - 'link_id' SQL Injection

source: https://www.securityfocus.com/bid/15181/info Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These vulnerabilities could permit remote attackers to...

Nuked-klaN 1.7 Download Module - 'dl_id' SQL Injection

source: https://www.securityfocus.com/bid/15181/info Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These vulnerabilities could permit remote attackers to...

Nuked-klaN 1.7 Sections Module - 'artid' SQL Injection

source: https://www.securityfocus.com/bid/15181/info Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These vulnerabilities could permit remote attackers to...

Nuked-klaN 1.7 Download Module - dl_id SQL Injection

Nuked-klaN 1.7 Download Module - dlid SQL Injection source: https://www.securityfocus.com/bid/15181/info Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. The...

Land Down Under HTTP Referer Header SQL Injection

The installed version of Land Down Under fails to sanitize input passed through the HTTP Referer header before using it in database queries. Provided PHP's 'magicquotesgpc' setting is disabled, an attacker can exploit this issue to manipulate database queries, possibly revealing sensitive...