City Reviewer - search.php Script SQL Injection

City Reviewer - search.php Script SQL Injection source: https://www.securityfocus.com/bid/57049/info City Reviewer is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an...

MyBB Transactions Plugin - 'transaction' SQL Injection

source: https://www.securityfocus.com/bid/57009/info The Transactions Plugin for MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access o...

mysql: acl_get() stack-based buffer overflow

Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...

Beat Websites - 'id' SQL Injection

source: https://www.securityfocus.com/bid/56683/info Beat Websites is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access or modify data, or...

Friends in War The FAQ Manager - question SQL Injection

Friends in War The FAQ Manager - question SQL Injection source: https://www.securityfocus.com/bid/56576/info Friends in War The FAQ Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit...

Friends in War The FAQ Manager - 'question' SQL Injection

source: https://www.securityfocus.com/bid/56576/info Friends in War The FAQ Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application,...

Freestyle Support Portal Component for Joomla! 'prodid' Parameter SQLi

The version of the Freestyle Support Portal component for Joomla! running on the remote host is affected by a SQL injection vulnerability in the index.php script due to improper sanitization of user-supplied input to the 'prodid' parameter before using it to construct database queries. An...

Dow Group SQL Injection Vulnerability

Vulnerability Description: SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL...

WordPress Plugin Eco-annu - eid SQL Injection

WordPress Plugin Eco-annu - eid SQL Injection source: https://www.securityfocus.com/bid/56479/info The Eco-annu plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit th...

WordPress Plugin PHP Event Calendar - cid SQL Injection

WordPress Plugin PHP Event Calendar - cid SQL Injection source: https://www.securityfocus.com/bid/56478/info The PHP Event Calendar plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An...

ESRI ArcGIS for Server - 'where' SQL Injection

source: https://www.securityfocus.com/bid/56474/info ESRI ArcGIS for Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

OrangeHRM - 'sortField' SQL Injection

source: https://www.securityfocus.com/bid/56417/info OrangeHRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

AWAuctionScript CMS - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/56388/info AWAuctionScript CMS is prone to the following remote vulnerabilities because it fails to sufficiently sanitize user-supplied data: 1. A remote SQL-injection vulnerability. 2. A remote file-upload vulnerability. 3. An HTML-injection vulnerabilit...

VicBlog - Multiple SQL Injections

VicBlog - Multiple SQL Injections source: https://www.securityfocus.com/bid/56307/info VicBlog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to...

Amateur Photographers Image Gallery - fullscreen.php?albumid SQL Injection

Amateur Photographers Image Gallery - fullscreen.php?albumid SQL Injection source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure...

Amateur Photographer's Image Gallery - 'plist.php?albumid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

Amateur Photographer's Image Gallery - 'plist.php?albumid' SQL Injection

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

CVE-2011-5204

Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading from the database...

AlamFifa CMS - user_name_cookie SQL Injection

AlamFifa CMS - usernamecookie SQL Injection source: https://www.securityfocus.com/bid/55746/info AlamFifa CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Modoer. system of injection of several versions through the kill-vulnerability warning-the black bar safety net

Not to force the injection, to engage a station dig of, search it's a large station with this little impact on the issue to share learning, nonsense not say more, see our pork point First\core\modules\item\ajax. php start calling $do = trim$GET'do'; $op = trim$GET'op'; // allows the operating...