DUClassmate 1.x - ICity SQL Injection

DUClassmate 1.x - ICity SQL Injection source: https://www.securityfocus.com/bid/24637/info DUClassmate is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Fixit iDms Pro Image Gallery - 'showfile.asp?fid' SQL Injection

source: https://www.securityfocus.com/bid/21282/info Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize user-supplied input. Successful exploits of these vulnerabiliti...

Fixit iDms Pro Image Gallery - showfile.asp?fid SQL Injection

Fixit iDms Pro Image Gallery - showfile.asp?fid SQL Injection source: https://www.securityfocus.com/bid/21282/info Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize...

JiRos Link Manager 1.0 - 'openlink.asp?LinkID' SQL Injection

source: https://www.securityfocus.com/bid/21226/info JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

Seditio 1.10 - Users.Profile.Inc.php SQL Injection

Seditio 1.10 - Users.Profile.Inc.php SQL Injection source: https://www.securityfocus.com/bid/21232/info Seditio is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Link Exchange Lite 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/21225/info Link Exchange Lite is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

Grandora Rialto 1.6 - listmain.asp?cat SQL Injection

Grandora Rialto 1.6 - listmain.asp?cat SQL Injection source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

The Classified Ad System 3.0 - default.asp Multiple Cross-Site Scripting Vulnerabilities

The Classified Ad System 3.0 - default.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21198/info The Classified Ad System is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it...

Rapid Classified 3.1 - 'search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Grandora Rialto 1.6 - 'searchmain.asp?cat' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

Rapid Classified 3.1 - viewad.asp SQL Injection

Rapid Classified 3.1 - viewad.asp SQL Injection source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize...

Rapid Classified 3.1 - search.asp Cross-Site Scripting

Rapid Classified 3.1 - search.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize...

Enthrallweb eHomes - homeDetail.asp?AD_ID SQL Injection

Enthrallweb eHomes - homeDetail.asp?ADID SQL Injection source: https://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input...

Rapid Classified 3.1 - view_print.asp Cross-Site Scripting

Rapid Classified 3.1 - viewprint.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly saniti...

Grandora Rialto 1.6 - printmain.asp?ID SQL Injection

Grandora Rialto 1.6 - printmain.asp?ID SQL Injection source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

Rapid Classified 3.1 - 'reply.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. A successful exploit of these...

ActiveNews Manager - 'query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21167/info Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

2020 Applications Data Shed 1.0 - f-email.asp?itemID SQL Injection

2020 Applications Data Shed 1.0 - f-email.asp?itemID SQL Injection source: https://www.securityfocus.com/bid/21156/info 20/20 DataShed is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

20/20 Applications Data Shed 1.0 - 'listings.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21156/info 20/20 DataShed is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acces...

BestWebApp Dating Site - login_form.asp?msg Cross-Site Scripting

BestWebApp Dating Site - loginform.asp?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/21158/info BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize...