2002 matches found
MangosWeb SQL Injection Vulnerability
No description provided by source. EXPLOIT TITLE: MangosWeb SQL Vulnerability DATE: 1/7/2012 BY Hood3dRob1n AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DORK: intext:MangosWeb ENhanced Version 3.0.3 @2009-2011, KeysWow Dev...
My Databook diary.php delete Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/24311/info My DataBook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication...
husrevforum 1.0.1/2.0.1 Philboard_forum.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24928/info The 'husrevforum' program is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
RunCMS 1.1/1.2 NewBB_Plus and Messages Modules Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14631/info RunCMS is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation...
Proxy Anket 3.0.1 anket.asp SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25613/info Proxy Anket is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...
Active News Manager activeNews_comments.asp articleID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21167/info Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploitin...
TinX CMS 3.5 'rss.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34021/info TinX CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
OnePlug CMS /products/details.asp Product_ID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/16155/info OnePlug CMS is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
PHP-Nuke Yellow_Pages Module - 'cid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28109/info The YellowPages module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Joomla! and Mambo 'com_activities' Component - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27820/info The Joomla! and Mambo 'comactivities' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...
dvbbs 8.2 - 'login.asp' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29429/info The 'dvbbs' program is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attack...
Xtreme ASP Photo Gallery 2.0 displaypic.asp sortorder Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because the application fails to properly...
Help Center Live 1.0/1.2.x Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13666/info Help Center Live is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Reportedly the application is affected by...
ProNews 1.5 lire-avis.php aa Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21516/info ProNews is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues, an SQL-injection issue, and a cross-site scripting issue, because the application fails to sufficiently...
Galerie 2.4 ShowGallery.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15313/info Galerie is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...
4images 1.7.1 top.php sessionid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17748/info 4Images is prone to multiple, unspecified SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successf...
Proje ASP Portal 2.0 - 'id' Parameter Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29427/info Proje ASP Portal is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker...
Pilot Group PG Roommate SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32430/info Pilot Group PG Roommate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
K-Search 1.0 - SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15588/info K-Search is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
Cyphor 0.19 footer.php t_login Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15047/info Cyphor is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database data. Other...