Campsite 3.x - article_id SQL Injection

Campsite 3.x - articleid SQL Injection source: https://www.securityfocus.com/bid/39862/info Campsite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

CVE-2009-4820

Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, enabling remote attackers to download the veribaze/angelo.mdb database via a direct HTTP request. The root cause is improper access control; documentation confirms exposure but provides no further e...

CVE-2009-4799

Diskos CMS 6.x contains a vulnerability where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to download the database via direct requests to artikler_prod.mdb or medlemmer.mdb. The issue is characterized by a network attack vector, low atta...

e107 0.7.x - e107_adminbanner.php SQL Injection

e107 0.7.x - e107adminbanner.php SQL Injection source: https://www.securityfocus.com/bid/39609/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

CVE-2009-4766

YP Portal MS-Pro Surumu aka MS-Pro Portal Scripti 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb...

My School Script - Database Disclosure

======================================================================================== | Title : My School Script Data Base Download Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : DB ====================== Exploit By indoushka ================================= Exploit : ...

Moodle Prior to 1.9.8/1.8.12 Multiple Vulnerabilities

Moodle is prone to multiple vulnerabilities, including: - multiple cross-site scripting issues - a security-bypass issue - an information-disclosure issue - multiple SQL-injection issues - an HTML-injection issue - a session-fixation issue Attackers can exploit these issues to bypass certain...

Viennabux Beta! - cat SQL Injection

Viennabux Beta! - cat SQL Injection source: https://www.securityfocus.com/bid/39602/info Viennabux Beta! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

MP3 MuZik Database Disclosure

======================================================================================== | Title : Mp3 MuZik Data Base Download Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/mp3.MuZik.Script.Pub.bY.Eh3an.P30vel.zip | Bug : DB...

Joomla! Component com_weblinks - 'id' SQL Injection

source: https://www.securityfocus.com/bid/39032/info The 'comweblinks' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2010-1067

E-membres 1.0 stores sensitive data under the web root with insufficient access control, allowing remote retrieval of the database via a direct request to db/bdEMembres.mdb. The vulnerability affects the application’s web-accessible storage, enabling partial confidentiality loss. No exploit detai...

Joomla! Component com_cb - cat SQL Injection

Joomla! Component comcb - cat SQL Injection source: https://www.securityfocus.com/bid/38916/info The 'comcb' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Kasseler CMS News Module - id SQL Injection

Kasseler CMS News Module - id SQL Injection source: https://www.securityfocus.com/bid/38909/info Kasseler CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Joomla! Component com_aml_2 - 'art' SQL Injection

source: https://www.securityfocus.com/bid/38914/info The 'comaml2' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Kasseler CMS News Module - 'id' SQL Injection

source: https://www.securityfocus.com/bid/38909/info Kasseler CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

PHPKIT 1.6.x - b-day.php Addon SQL Injection

PHPKIT 1.6.x - b-day.php Addon SQL Injection source: https://www.securityfocus.com/bid/38891/info PHPKIT 'b-day.php' addon is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Firebird XDR Operation Request Handling Denial of Service (CVE-2008-0387)

There exists a null-dereference overflow vulnerability in Firebird database project. The flaw resides in the External Data Representation XDR protocol processing routines. A remote unauthenticated attacker may exploit this vulnerability by sending crafted message to the target server. Successful...

Joomla! Component com_alert - 'q_item' SQL Injection

source: https://www.securityfocus.com/bid/38827/info The 'comalert' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

SamaGraph CMS - 'inside.aspx' SQL Injection

source: https://www.securityfocus.com/bid/39892/info SamaGraph CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection

source: https://www.securityfocus.com/bid/38634/info Friendly Technologies TR-069 ACS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...