OrangeHRM 2.6.11 - libcontrollersCentralController.php?id SQL Injection

OrangeHRM 2.6.11 - libcontrollersCentralController.php?id SQL Injection source: https://www.securityfocus.com/bid/50857/info OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

Dolibarr ERPCRM 3.1.0 - adminboxes.php?rowid SQL Injection

Dolibarr ERPCRM 3.1.0 - adminboxes.php?rowid SQL Injection source: https://www.securityfocus.com/bid/50777/info Dolibarr is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated...

Dolibarr ERP/CRM 3.1.0 - '/user/info.php?id' SQL Injection

source: https://www.securityfocus.com/bid/50777/info Dolibarr is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Exploiting these issues could allow an attacker to...

TA.CMS (TeachArabia) - 'index.php?id' SQL Injection

source: https://www.securityfocus.com/bid/50773/info TA.CMS is prone to multiple local file-include and SQL-injection vulnerabilities. An attacker can exploit these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and view and...

Digital Attic Foundation CMS - 'id' SQL Injection

source: https://www.securityfocus.com/bid/50735/info Digital Attic Foundation CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

Support Incident Tracker (SiT!) Multiple Input Validation Vulnerabilities

Support Incident Tracker SiT! is prone to the following input- validation vulnerabilities: 1. A cross-site scripting vulnerability 2. An SQL-injection vulnerability 3. A PHP code-injection vulnerability 4. A path-disclosure vulnerability 5. An arbitrary-file-upload vulnerability Exploiting these...

TWSL2011-017: Multiple Vulnerabilities in Merethis Centreon

Trustwave's SpiderLabs Security Advisory TWSL2011-017: Multiple Vulnerabilities in Merethis Centreon https://www.trustwave.com/spiderlabs/advisories/TWSL2011-017.txt Published: 2011-11-04 Version: 1.0 Vendor: Merethis http://www.merethis.com and http://www.centreon.com Product: Centreon Version...

PBCS Technology - 'articlenav.php' SQL Injection

source: https://www.securityfocus.com/bid/50577/info PBCS Technology is prone to an SQL Injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

Dell KACE K2000 Appliance read-only database account allows account information disclosure

Overview A vulnerability in the database component of the Dell KACE K2000 Deployment Appliance may allow a remote attacker to read account information from an affected device. Description The Dell KACE K2000 Deployment Appliance is an integrated systems provisioning product for large-scale...

Symphony 2.2.3 - symphonypublishimages?filter Cross-Site Scripting

Symphony 2.2.3 - symphonypublishimages?filter Cross-Site Scripting source: https://www.securityfocus.com/bid/50470/info Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data...

PreProjects Pre Studio Business Cards Designer 'page.php' SQL Injection Vulnerability

Pre Studio Business Cards Designer is prone to an SQL-injection vulnerability because the application fails to properly sanitize user- supplied input before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

Boonex Dolphin 'xml/get_list.php' SQL Injection Vulnerability

Boonex Dolphin is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the...

Boonex Dolphin 6.1 - get_list.php SQL Injection

Boonex Dolphin 6.1 - getlist.php SQL Injection source: https://www.securityfocus.com/bid/50286/info Boonex Dolphin is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an...

Boonex Dolphin 6.1 - 'get_list.php' SQL Injection

source: https://www.securityfocus.com/bid/50286/info Boonex Dolphin is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access o...

Site@School 2.4.10 - '/index.php' Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/50195/info Site@School is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or...

vTiger CRM 5.2 - onlyforuser SQL Injection

vTiger CRM 5.2 - onlyforuser SQL Injection source: https://www.securityfocus.com/bid/49948/info vtiger CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Joomla! Component com_expedition - id SQL Injection

Joomla! Component comexpedition - id SQL Injection source: https://www.securityfocus.com/bid/50019/info The 'comexpedition' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting thi...

Netvolution 2.5.8 - referer Header SQL Injection

Netvolution 2.5.8 - referer Header SQL Injection source: https://www.securityfocus.com/bid/49918/info Netvolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

Netvolution 2.5.8 - 'referer' Header SQL Injection

source: https://www.securityfocus.com/bid/49918/info Netvolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

openEngine 'id' Parameter SQL Injection Vulnerability

openEngine is prone to an SQL Injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlyi...