Def_Blog 1.0.3 - comlook.php?article SQL Injection

DefBlog 1.0.3 - comlook.php?article SQL Injection source: https://www.securityfocus.com/bid/30289/info DefBlog is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

CVE-2008-2605

Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2604...

Pubs Black Cat [The Fun] - 'browse.groups.php' SQL Injection

source: https://www.securityfocus.com/bid/30221/info Pubs Black Cat The Fun is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

Zoph 0.7.2.1 - SQL Injection

source: https://www.securityfocus.com/bid/30116/info Zoph is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify dat...

PHP-Nuke 4ndvddb 0.91 Module - id SQL Injection

PHP-Nuke 4ndvddb 0.91 Module - id SQL Injection source: https://www.securityfocus.com/bid/30120/info The '4ndvddb' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

phpWebNews 0.2 MySQL Edition (id_kat) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= phpWebNews 0.2 MySQL Edition idkat SQL Injection Vulnerability ================================================================= Exploit found by sToRm phpWebNews v0.2 MySQL...

RSS-aggregator 1.0 - 'IdTag' SQL Injection

source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database,...

The Rat CMS - viewarticle.php Multiple Cross-Site Scripting Vulnerabilities

The Rat CMS - viewarticle.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently...

The Rat CMS - 'viewarticle2.php?id' SQL Injection

source: https://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

The Rat CMS - viewarticle.php?id SQL Injection

The Rat CMS - viewarticle.php?id SQL Injection source: https://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

Joomla! Component EXP Shop 1.0 - SQL Injection

Joomla! Component EXP Shop 1.0 - SQL Injection source: https://www.securityfocus.com/bid/29869/info The EXP Shop component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

PHPEasyNews <= 1.13 RC2 (post) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHPEasyNews = 1.13 RC2 post Remote SQL Injection Vulnerability ================================================================= Discovered By: t0pP8uZz Discovered On: 4 JUN...

Real Estate Website 1.0 - location.asp Multiple Input Validation Vulnerabilities

Real Estate Website 1.0 - location.asp Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/29612/info Real Estate Website is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to...

Te Ecard - 'id' Multiple SQL Injections

source: https://www.securityfocus.com/bid/29478/info Te Ecard is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

OtomiGenX 2.2 - 'userAccount' SQL Injection

source: https://www.securityfocus.com/bid/29470/info OtomiGenX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

TorrentTrader Classic 1.x - scrape.php SQL Injection

TorrentTrader Classic 1.x - scrape.php SQL Injection source: https://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

CMS Easyway - 'mid' SQL Injection

source: https://www.securityfocus.com/bid/29461/info CMS Easyway is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

dvbbs 8.2 - login.asp Multiple SQL Injections

dvbbs 8.2 - login.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/29429/info The 'dvbbs' program is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...

Joomla! Mambo Component Artists - idgalery SQL Injection

Joomla! Mambo Component Artists - idgalery SQL Injection source: https://www.securityfocus.com/bid/29407/info The Artists component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

PHPFix 2.0 - auth00_pass.php?account SQL Injection

PHPFix 2.0 - auth00pass.php?account SQL Injection source: https://www.securityfocus.com/bid/29371/info phpFix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...