PHP Pro Bid 5.2.4 - viewfeedback.php Multiple SQL Injections

PHP Pro Bid 5.2.4 - viewfeedback.php Multiple SQL Injections source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize...

MusicBox 2.3.4 - page SQL Injection

MusicBox 2.3.4 - page SQL Injection source: https://www.securityfocus.com/bid/19129/info MusicBox is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...

VirtuaStore 2.0 - 'Password' SQL Injection

source: https://www.securityfocus.com/bid/18790/info VirtuaStore is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, access or modify data, ...

newsPHP 2006 PRO - incrss_feed.php?category SQL Injection

newsPHP 2006 PRO - incrssfeed.php?category SQL Injection source: https://www.securityfocus.com/bid/18726/info NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the...

Dating Agent 4.7.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18607/info Dating Agent is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

V3 Chat Instant Messenger - '/mail/reply.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

V3 Chat Instant Messenger - mailindex.php?id Cross-Site Scripting

V3 Chat Instant Messenger - mailindex.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

V3 Chat Instant Messenger - online.php?site_id Cross-Site Scripting

V3 Chat Instant Messenger - online.php?siteid Cross-Site Scripting source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

V3 Chat Instant Messenger - 'expire.php?cust_name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

SaphpLesson 1.1/2.0/3.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/18501/info The saphplesson module is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the...

CoolForum 0.x - 'editpost.php' SQL Injection

source: https://www.securityfocus.com/bid/18268/info CoolForum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Alex DownloadEngine 1.4.1 - 'comments.php' SQL Injection

source: https://www.securityfocus.com/bid/18293/info DownloadEngine is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise th...

CVE-2006-2742

SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the 1 count and 2 from variables to a database.mysql.inc, b database.pgsql.inc, and c database.mysqli.inc...

vBulletin 3.0.10 - Portal.php SQL Injection

vBulletin 3.0.10 - Portal.php SQL Injection source: https://www.securityfocus.com/bid/18197/info vBulletin is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

Mini-NUKE 2.3 - Your_Account.asp Multiple SQL Injections

Mini-NUKE 2.3 - YourAccount.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/18126/info Mini-NUKE is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

Mini-NUKE 2.3 - 'Your_Account.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/18126/info Mini-NUKE is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploits could allow an attacker to compromis...

Cosmoshop 8.10.788.11.106 - Lshop.cgi SQL Injection

Cosmoshop 8.10.788.11.106 - Lshop.cgi SQL Injection source: https://www.securityfocus.com/bid/18024/info Cosmoshop is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...

PHP Script Tools PSY Auction - 'item.php?id' SQL Injection

source: https://www.securityfocus.com/bid/17974/info PSY Auction is prone to multiple input-validation vulnerabilities. The issues include HTML-injection and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

Geeklog 1.4 - Multiple Input Validation Vulnerabilities

Geeklog 1.4 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18154/info Geeklog is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the applicati...

EDirectoryPro - Search_result.asp SQL Injection

EDirectoryPro - Searchresult.asp SQL Injection source: https://www.securityfocus.com/bid/17912/info EDirectoryPro is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...