Madrese-Portal - 'haber.asp' SQL Injection

source: https://www.securityfocus.com/bid/33045/info Madrese-Portal is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

Injader 2.1.1 - SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/32843/info Injader is prone to multiple HTML-injection vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injection issues to execute arbitrary script code in...

iyzi Forum 1.0b3 - Database Disclosure

iyzi Forum db/iyziforum.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Name Script : iyzi Forum Download : http://www.iyziforum.com/ Exploit http://xxxx.com/path/db/iyziforum.mdb Live Dem...

Discussion Web 4 - Remote Database Disclosure

--------------------------------------------------------- Portal Name: Discussion Web Version : 4.0 Vendor : http://www.takempis.com/aboutdiscussion.htm Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...

CVE-2008-5329

The CVE-2008-5329 issue affects ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 . An attacker could direct a client’s submissions and changes to an arbitrary database by configuring multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties fi...

Z1Exchange 1.0 - id SQL Injection

Z1Exchange 1.0 - id SQL Injection source: https://www.securityfocus.com/bid/32598/info Z1Exchange is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Jbook - SQL Injection

source: https://www.securityfocus.com/bid/32599/info Jbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, o...

Orkut Clone - 'profile_social.php?id' SQL Injection

source: https://www.securityfocus.com/bid/32600/info Orkut Clone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

webstudio-sql.txt

Application: WebStudio CMS Vendor Name: BDigital Media Ltd Vendors Url: http://www.bdigital.biz Bug Type: WebStudio CMS pageid Blind SQL Injection Vulnerability Exploitation: Remote Severity: Critical Solution Status: Unpatched Introduction: WebStudio CMS is a modular Web Content Management Syste...

Easyedit CMS - page.php?intPageID SQL Injection

Easyedit CMS - page.php?intPageID SQL Injection source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Discuz! trade.php 数据库'注射'漏洞

文件trade.php: $message = trim$message; if$message $message = daddslashes$tradelog'message', 1."\t\t\t".$discuzuid."\t".$discuzuser."\t".$timestamp."\t".nl2brstriptagssubstr$message, 0, 200; //$message用substr处理了下,取前200个字符 else $message = daddslashes$tradelog'message', 1; $db-query"UPDATE...

YourFreeWorld Downline Builder Pro - tr.php SQL Injection

YourFreeWorld Downline Builder Pro - tr.php SQL Injection source: https://www.securityfocus.com/bid/32047/info Downline Builder Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

SpitFire Photo Pro - 'pages.php' SQL Injection

source: https://www.securityfocus.com/bid/32012/info SpitFire Photo Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

bcoos 1.0.13 - click.php SQL Injection

bcoos 1.0.13 - click.php SQL Injection source: https://www.securityfocus.com/bid/31941/info The 'bcoos' program is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

All In One 1.4 Control Panel - cp_polls_results.php SQL Injection

All In One 1.4 Control Panel - cppollsresults.php SQL Injection source: https://www.securityfocus.com/bid/31949/info All In One Control Panel AIOCP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

All In One 1.4 Control Panel - 'cp_polls_results.php' SQL Injection

source: https://www.securityfocus.com/bid/31949/info All In One Control Panel AIOCP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

bcoos 1.0.13 - 'click.php' SQL Injection

source: https://www.securityfocus.com/bid/31941/info The 'bcoos' program is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Dizi Portali - 'diziler.asp' SQL Injection

source: https://www.securityfocus.com/bid/31849/info Dizi Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Jetbox CMS 2.1 - admincmsnav.php?nav_id SQL Injection

Jetbox CMS 2.1 - admincmsnav.php?navid SQL Injection source: https://www.securityfocus.com/bid/31824/info Jetbox CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

SweetCMS 1.5.2 - index.php SQL Injection

SweetCMS 1.5.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/31774/info SweetCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modif...