CVE-2007-6518

Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board wBB Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the 1 showposts, 2 sortby, and 3 sortorder parameters...

Logaholic - index.php SQL Injection

Logaholic - index.php SQL Injection source: https://www.securityfocus.com/bid/27003/info Logaholic is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues, a cross-site scripting issue, and an HTML-injection issue. The issues occur because the application...

Logaholic - update.php?page SQL Injection

Logaholic - update.php?page SQL Injection source: https://www.securityfocus.com/bid/27003/info Logaholic is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues, a cross-site scripting issue, and an HTML-injection issue. The issues occur because the...

MKPortal 1.1 Gallery Module - SQL Injection

MKPortal 1.1 Gallery Module - SQL Injection source: https://www.securityfocus.com/bid/26860/info MKPortal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker ...

E-Xoops 1.0.51.0.8 - myalbumratephoto.php?lid SQL Injection

E-Xoops 1.0.51.0.8 - myalbumratephoto.php?lid SQL Injection source: https://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

bttlxe Forum 2.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities

bttlxe Forum 2.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26790/info bttlxe Forum is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficientl...

E-Xoops 1.0.5/1.0.8 - '/myalbum/ratephoto.php?lid' SQL Injection

source: https://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

E-Xoops 1.0.5/1.0.8 - '/mydownloads/ratefile.php?lid' SQL Injection

source: https://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

DWdirectory 2.1 - SQL Injection

--==+================================================================================+==-- --==+ DWdirectory 2.1 AND PRIOR SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK...

WebDoc 3.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/26761/info WebDoc is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx?rmore' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal cookie-based authentication...

bcoos 1.0.10 - ratefile.php SQL Injection

bcoos 1.0.10 - ratefile.php SQL Injection source: https://www.securityfocus.com/bid/26664/info The 'bcoos' program is prone to an SQL-injection vulnerability because it fails to adequately sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to...

CoolShot E-Lite POS 1.0 - Login SQL Injection

CoolShot E-Lite POS 1.0 - Login SQL Injection source: https://www.securityfocus.com/bid/26558/info E-lite POS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

CoolShot E-Lite POS 1.0 - Login SQL Injection

source: https://www.securityfocus.com/bid/26558/info E-lite POS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

NetAuctionHelp 4.1 - Search.ASP SQL Injection Vulnerability

NetAuctionHelp 4.1 Search.ASP SQL Injection Vulnerability. Webapps exploit for asp platform source: http://www.securityfocus.com/bid/26540/info NetAuctionHelp is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Bitweaver 1.x2.0 - usersregister.php Cross-Site Scripting

Bitweaver 1.x2.0 - usersregister.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26801/info Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input including multiple cross-site scripting...

Bitweaver 1.x/2.0 - 'users/register.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26801/info Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input including multiple cross-site scripting vulnerabilities, multiple HTML-injection vulnerabilities, and an...

Rapid Classified - AgencyCatResult.asp SQL Injection

Rapid Classified - AgencyCatResult.asp SQL Injection source: https://www.securityfocus.com/bid/26379/info Rapid Classified is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

mhfp-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multi Host...

Aleris Web Publishing Server 3.0 - Page.asp SQL Injection

Aleris Web Publishing Server 3.0 - Page.asp SQL Injection source: https://www.securityfocus.com/bid/26207/info Aleris Web Publishing Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issu...