BlueSoft Rate My Photo Site - ty SQL Injection

BlueSoft Rate My Photo Site - ty SQL Injection source: https://www.securityfocus.com/bid/49092/info BlueSoft Rate My Photo Site is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

Ataccan E-Ticaret Scripti - 'id' SQL Injection

source: https://www.securityfocus.com/bid/48970/info Ataccan E-ticaret scripti is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acce...

MyBB MyTabs Plugin - tab SQL Injection

MyBB MyTabs Plugin - tab SQL Injection source: https://www.securityfocus.com/bid/48952/info The MyTabs plugin for MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow ...

Oracle 1 0 & 11g exp.exe 0day stack overflow-vulnerability warning-the black bar safety net

Just being bored, I found a Oracle 11g database, there is a bit of high impact but low likleyhood of 0day attacks. The vulnerability is the Oracle export utility on the command line to specify the parameter file inside the“file”field within the analysis. The EXPORT utility as privileged code...

Support Incident Tracker (SiT!) 3.63 p1 - 'report_marketing.php?exc[]' SQL Injection

source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Joomla! Component com_virtualmoney 1.5 - SQL Injection

source: https://www.securityfocus.com/bid/48883/info The 'comvirtualmoney' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Synergy Software - id SQL Injection

Synergy Software - id SQL Injection source: https://www.securityfocus.com/bid/48835/info Synergy Software is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...

Synergy Software - 'id' SQL Injection

source: https://www.securityfocus.com/bid/48835/info Synergy Software is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...

Joomla! Component Controller - Itemid SQL Injection

Joomla! Component Controller - Itemid SQL Injection source: https://www.securityfocus.com/bid/48690/info The Controller component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Easy Estate Rental - 's_location' SQL Injection

source: https://www.securityfocus.com/bid/48684/info Easy Estate Rental is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, acce...

AJ Classifieds - listingid SQL Injection

AJ Classifieds - listingid SQL Injection source: https://www.securityfocus.com/bid/48702/info AJ Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Sphider 1.3.x - Admin Panel Multiple SQL Injections

Sphider 1.3.x - Admin Panel Multiple SQL Injections source: https://www.securityfocus.com/bid/48647/info Sphider is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

PT-2011-23: Database information disclosure in GLPI

Positive Research Center has discovered a database information disclosure vulnerability in GLPI. The vulnerability can be exploited with a minimally privileged user account such as "post-only." The vulnerable script is /ajax/autocompletion.php. An authorized user can send a special request to thi...

SQL Injection Vulnerability in Google Lab Database System

SQL Injection Vulnerability in Google Lab Database System Very Big & Critical Vulnerability detected in Google Lab System. Vendor is already reported by hackers, But they don't take positive step in this case, so finally hackers exposed the vulnerability in public by Bangladesh Cyber Army Admin -...

Joomla! Component com_morfeoshow - idm SQL Injection

Joomla! Component commorfeoshow - idm SQL Injection source: https://www.securityfocus.com/bid/48452/info The 'commorfeoshow' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...

Eshop Manager - Multiple SQL Injections

Eshop Manager - Multiple SQL Injections source: https://www.securityfocus.com/bid/48391/info Eshop Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an...

Nibbleblog 3 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/48339/info Nibbleblog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, acce...

Nibbleblog 3 - Multiple SQL Injections

Nibbleblog 3 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48339/info Nibbleblog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an...

Old Y article management system default database-vulnerability-vulnerability warning-the black bar safety net

Keywords: Powered by laoy8! Words for a sister to say that she has a article blog, for a moment, heart starting to see is a sprinkle system, The results of a look at the old Y, ASP! Apart from anything else directly sweeping the injection, can be swept for a long time is not injection point of...

Joomla! Component CCBoard - SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/48108/info http://www.noticeboardpro.com/notice-board-pro-copyright.htmlJoomla CCBoard is prone to an SQL-injection vulnerability and an arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could all...