OlateDownload 3.4 - 'search.php?query' SQL Injection

source: https://www.securityfocus.com/bid/20278/info OlateDownload is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could...

CubeCart 3.0.x - '/admin/nav.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...

PHP-post Web Forum 0.x.1.0 - 'profile.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of these...

EasyPage 7 - Default.aspx SQL Injection

EasyPage 7 - Default.aspx SQL Injection source: https://www.securityfocus.com/bid/20049/info EasyPage is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise th...

Jupiter CMS 1.1.4/1.1.5 - '/modules/blocks.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20048/info Jupiter CMSA is prone to multiple input-validation vulnerabilities, including cross-site scripting, SQL-injection, and arbitrary file-upload issues, because the application fails to sanitize user-supplied input. A successful exploit of these...

CVE-2006-4782

Technical details for CVE-2006-4782 are not provided in the connected documents. Monitor for updates.

DCP-Portal 6.0 - login.php?Username SQL Injection

DCP-Portal 6.0 - login.php?Username SQL Injection source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitiz...

Vikingboard 0.1 - 'topic.php' SQL Injection

source: https://www.securityfocus.com/bid/19919/info Viking board is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. This may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

VisualShapers EZContents 2.0.3 - 'Headeruserdata.php' SQL Injection

source: https://www.securityfocus.com/bid/19777/info ezContents is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabiliti...

CubeCart 3.0.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/19563/info CubeCart is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could...

Informix Long Username Buffer Overflow Vulnerability

NGSSoftware Insight Security Research Advisory Name: Informix Long Username Buffer Overflow Vulnerability Systems Affected: Informix 9.40.xC6 and earlier, 10.00.xC2 and earlier Severity: Critical Vendor URL: http://www.ibm.com/ Author: David Litchfield [email protected] Date of Public...

VWar 1.x - 'war.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Anychart 3.0 - Password SQL Injection

Anychart 3.0 - Password SQL Injection source: https://www.securityfocus.com/bid/19330/info anychart is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...

Seir Anphin V666 Community Management System - Multiple SQL Injections

source: https://www.securityfocus.com/bid/19244/info Seir Anphin V666 Community Management System is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities could permit remote...

X-Scripts X-Poll 1.10 - top.php SQL Injection

X-Scripts X-Poll 1.10 - top.php SQL Injection source: https://www.securityfocus.com/bid/19236/info X-Poll is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...

PHP Pro Bid 5.2.4 - viewfeedback.php Multiple SQL Injections

PHP Pro Bid 5.2.4 - viewfeedback.php Multiple SQL Injections source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize...

MusicBox 2.3.4 - page SQL Injection

MusicBox 2.3.4 - page SQL Injection source: https://www.securityfocus.com/bid/19129/info MusicBox is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...

VirtuaStore 2.0 - 'Password' SQL Injection

source: https://www.securityfocus.com/bid/18790/info VirtuaStore is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, access or modify data, ...

newsPHP 2006 PRO - incrss_feed.php?category SQL Injection

newsPHP 2006 PRO - incrssfeed.php?category SQL Injection source: https://www.securityfocus.com/bid/18726/info NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the...

Dating Agent 4.7.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18607/info Dating Agent is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...