OpenDocMan 1.2.5 - 'toBePublished.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - user.php Cross-Site Scripting

OpenDocMan 1.2.5 - user.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

OpenDocMan 1.2.5 - 'department.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

SLES9: Security update for pcre

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pcre For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018284 within the SuSE...

Joomla! Component CB Resume Builder - group_id SQL Injection

Joomla! Component CB Resume Builder - groupid SQL Injection source: https://www.securityfocus.com/bid/36598/info The CB Resume Builder 'comcbresumebuilder' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it...

Palm Pre WebOS 1.1 - Remote File Access

Palm Pre WebOS 1.1 - Remote File Access I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+...

Authentication flaw

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors...

Ipswitch WhatsUp Web Interface SQL Injection (CVE-2005-1250)

WhatsUp Professional 2005 is a network monitoring and resource management solution. WhatsUp Professional uses a relational database to store the information about user accounts and network devices that are monitored by the application. The relational databases supported by WhatsUp Professional ar...

Vastal I-Tech Agent Zone - view_listing.php SQL Injection

Vastal I-Tech Agent Zone - viewlisting.php SQL Injection source: https://www.securityfocus.com/bid/36503/info Agent Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Vastal I-Tech Cosmetics Zone - view_products.php SQL Injection

Vastal I-Tech Cosmetics Zone - viewproducts.php SQL Injection source: https://www.securityfocus.com/bid/36485/info Cosmetics Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Joomla! Component SportFusion 0.2.x - SQL Injection

Joomla! Component SportFusion 0.2.x - SQL Injection source: https://www.securityfocus.com/bid/36481/info The SportFusion component 'comsportfusion' for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Vastal I-Tech DVD Zone - 'view_mag.php' SQL Injection

source: https://www.securityfocus.com/bid/36487/info DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Joomla! Component JoomlaFacebook - SQL Injection

Joomla! Component JoomlaFacebook - SQL Injection source: https://www.securityfocus.com/bid/36484/info The JoomlaFacebook component 'comfacebook' for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Vastal I-Tech DVD Zone - 'view_mag.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36487/info DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Joomla! Component SportFusion 0.2.x - SQL Injection

source: https://www.securityfocus.com/bid/36481/info The SportFusion component 'comsportfusion' for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

MyBB 1.4.8 - 'search.php' SQL Injection

source: https://www.securityfocus.com/bid/36460/info MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or...

FanUpdate 2.2.1 (show-cat.php listingid) SQL Injection Vuln

Exploit for unknown platform in category web applications =========================================================== FanUpdate 2.2.1 show-cat.php listingid SQL Injection Vuln =========================================================== Author : InSecurity Romania Website : https://insecurity.ro...

T-HTB Manager 0.5 - Multiple Blind SQL Injections

Salvatore "drosophila" Fresta + Application: T-HTB Manager + Version: 0.5 + Website: http://sourceforge.net/apps/mediawiki/t-htbmanager/index.php?title=MainPage + Bugs: A Multiple Blind SQL Injection + Exploitation: Remote + Date: 10 Sep 2009 + Discovered by: Salvatore Fresta aka drosophila +...

DvBBS 2.0 - 'boardrule.php' SQL Injection

source: https://www.securityfocus.com/bid/36282/info DvBBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, o...

DvBBS 2.0 - boardrule.php SQL Injection

DvBBS 2.0 - boardrule.php SQL Injection source: https://www.securityfocus.com/bid/36282/info DvBBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...