RunCMS Module Partners - id SQL Injection

RunCMS Module Partners - id SQL Injection source: https://www.securityfocus.com/bid/47388/info The RunCMS 'partners' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

RunCMS Module Partners - 'id' SQL Injection

source: https://www.securityfocus.com/bid/47388/info The RunCMS 'partners' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Main Advertising vulnerable to SQLI by lionaneesh !

Main Advertising vulnerable to SQLI by lionaneesh ! One of the best advertising companies in the world which is even used by megaupload is vulnerable to SQLi. What I can do Power:- Loinaneesh found a database in which the hits to a particular link was entered this is most probably used for counti...

PHP-Fusion - 'article_id' SQL Injection

source: https://www.securityfocus.com/bid/47128/info PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

BoutikOne - rss_top10.php?lang SQL Injection

BoutikOne - rsstop10.php?lang SQL Injection source: https://www.securityfocus.com/bid/46861/info Pixie is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

BoutikOne - search.php Multiple SQL Injections

BoutikOne - search.php Multiple SQL Injections source: https://www.securityfocus.com/bid/46861/info Pixie is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

BMForum Myna 6.0 - SQL Injection

Author: Stephan Sattler Software Website: http://www.bmforum.com/ Software Link: http://www.bmforum.com/down/ Required: magic quotes = Off Vulnerability /add-on/jsviewnew.php line 20++: $length = $GET'length'; $forumid = $GET'forumid'; $num = $GET'num'; $forumnum=$forumid; .... $query = "SELECT...

Rae Media Real Estate Multi Agent SQL Injection Vulnerability

Exploit for asp platform in category web applications Multi Agent System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Rae Media Real Estate Single Agent - SQL Injection

source: https://www.securityfocus.com/bid/45211/info Real Estate Single is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

WP Forum Server 1.6.5 SQL Injection

================================= Vulnerability ID: HTB22852 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumserverwordpressplugin2.html Product: WP Forum Server wordpress plugin Vendor: VastHTML http://lucidcrew.com/ Vulnerable Version: 1.6.5 Vendor Notification: Vulnerability...

CGI Generic SQL Injection (Parameters Names)

By providing specially crafted parameters to CGIs, Nessus was able to get an error from the underlying database. This error suggests that the CGI is affected by a SQL injection vulnerability. An attacker may be able to exploit this flaw to bypass authentication, read confidential data, modify the...

Joomla! Component com_clan_members - 'id' SQL Injection

source: https://www.securityfocus.com/bid/46080/info The 'comclanmembers' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2011-0009

Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to determine cleartext passwords via a brute-force attack on the database...

PHP Coupon Script <= 6.0 SQLi Vulnerability - Active Check

PHP Coupon Script is prone to an SQL injection SQLi vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PHPAuctions - viewfaqs.php SQL Injection

PHPAuctions - viewfaqs.php SQL Injection source: https://www.securityfocus.com/bid/45928/info PHPAuctions is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...

Multiple Vulnerabilities in Redaxscript

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Redaxscript which could be exploited to perform SQL injection attacks and gain access to sensitive information. 1 SQL injection vulnerabilities in Redaxscript The vulnerability exists due to input sanitation erro...

Advanced Webhost Billing System (AWBS) 2.9.2 - 'oid' SQL Injection

source: https://www.securityfocus.com/bid/45827/info Advanced Webhost Billing System AWBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or...

Lifetype 1.2.10 HTTP Referer Cross Site Scripting

Exploit Title: lifetype 1.2.10 http referer XSSstored Date: 11-1-2010 Author: Saif El-Sherei Software Link: http://lifetype.net/page/downloads Version: 1.2.10 Tested on: firefox 3.0.15 failure to sanitize the http referer header in index.php results in a cross site scripting attack against admins...

CMS Tovar - 'tovar.php' SQL Injection

source: https://www.securityfocus.com/bid/45772/info CMS Tovar is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

OpenEMR <= 3.2.0 Multiple Input Validation Vulnerabilities

OpenEMR is prone to SQL injection SQLi, HTML injection, and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...