2884 matches found
vBulletin 4.0.2 - update_order SQL Injection
vBulletin 4.0.2 - updateorder SQL Injection source: https://www.securityfocus.com/bid/61449/info VBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to...
WordPress Plugin miniBB - SQL Injection Multiple Cross-Site Scripting Vulnerabilities
WordPress Plugin miniBB - SQL Injection Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/61116/info miniBB is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal...
Simple PHP Agenda 2.2.8 - edit_event.php?eventid SQL Injection
Simple PHP Agenda 2.2.8 - editevent.php?eventid SQL Injection ============================================= WEBERA ALERT ADVISORY 02 - Discovered by: Anthony Dubuissez - Severity: high - CVE Request – 05/06/2013 - CVE Assign – 06/06/2013 - CVE Number – CVE-2013-3961 - Vendor notification –...
ScriptCase - scelta_categoria.php SQL Injection
ScriptCase - sceltacategoria.php SQL Injection source: https://www.securityfocus.com/bid/60461/info ScriptCase is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Weyal CMS - Multiple SQL Injections
Weyal CMS - Multiple SQL Injections source: https://www.securityfocus.com/bid/60089/info Weyal CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to...
Weyal CMS - Multiple SQL Injections
source: https://www.securityfocus.com/bid/60089/info Weyal CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...
Espcms V5.6.13.04.22 UTF8 正式版注入漏洞之3/N
简要描述： 某文件对于从数据库中读取的变量未过滤，放入其他的sql语句中，造成二次sql注入 详细说明： 文件\interface\public.php中： $ecmemberusernameid = $this-membercookieview'userid'; if $ecmemberusernameid $rsMember = $this-getmemberattvalue$ecmemberusernameid; $userid = $ecmemberusernameid ? $ecmemberusernameid : 0; $name = $rsMember'alias' ?...
mysql: unspecified vulnerability related to Server (CPU April 2013)
Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...
mysql: unspecified DoS related to Information Schema (CPU April 2013)
Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Information Schema...
Todoo Forum 2.0 - todooforum.php Multiple Cross-Site Scripting Vulnerabilities
Todoo Forum 2.0 - todooforum.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/59069/info Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based...
WordPress Plugin Spider Video Player - 'theme' SQL Injection
source: https://www.securityfocus.com/bid/59021/info Spider Video Player plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
PHP Address Book - '/addressbook/register/delete_user.php?id' SQL Injection
source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...
PHP Address Book - '/addressbook/register/reset_password_save.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...
PHP Address Book - addressbookregistertraffic.php?var SQL Injection
PHP Address Book - addressbookregistertraffic.php?var SQL Injection source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to...
PHP Address Book - '/addressbook/register/user_add_save.php?email' SQL Injection
source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...
Symphony - 'sort' SQL Injection
source: https://www.securityfocus.com/bid/58843/info Symphony is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...
MyBB 1.6.6 - index.php?conditions[usergroup][] Cross-Site Scripting
MyBB 1.6.6 - index.php?conditionsusergroup Cross-Site Scripting source: https://www.securityfocus.com/bid/52743/info MyBB is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these vulnerabilities could allow an attacker to execute arbitrary script code,...
PT-2013-21: XML External Entities Injection in Oracle Database
The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in Oracle Database. If an attacker sends specially crafted SQL query containing malformed XML to Oracle Database server, the server will automatically send the contents of remote resourc...
IP.Gallery - 'img' SQL Injection
source: https://www.securityfocus.com/bid/57444/info IP.Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data...
