ISP Site Man - admin_login.asp SQL Injection

ISP Site Man - adminlogin.asp SQL Injection source: https://www.securityfocus.com/bid/17347/info Site Man is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

RedCMS 0.1 - 'profile.php?u' SQL Injection

source: https://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to HTML-injection and SQL-injection vulnerabilities. A...

FusionZONE CouponZONE 4.2 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/17274/info The couponZONE application is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

Cholod MySQL Based Message Board - 'Mb.cgi' SQL Injection

source: https://www.securityfocus.com/bid/17224/info MySQL Based Message Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

1WebCalendar 4.0 - 'viewEvent.cfm?EventID' SQL Injection

source: https://www.securityfocus.com/bid/17193/info 1WebCalendar is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...

1WebCalendar 4.0 - 'mainCal.cfm' SQL Injection

source: https://www.securityfocus.com/bid/17193/info 1WebCalendar is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...

MusicBox 2.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17149/info MusicBox is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

DSCounter 1.2 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/17112/info DSCounter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

PluggedOut Nexus 0.1 - 'forgotten_password.php' SQL Injection

source: https://www.securityfocus.com/bid/16915/info PluggedOut Nexus is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromi...

n8cms 1.11.2 - index.php Multiple Cross-Site Scripting Vulnerabilities

n8cms 1.11.2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16858/info The 'n8cms' script is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input...

Web Calendar Pro - Dropbase.php SQL Injection

Web Calendar Pro - Dropbase.php SQL Injection source: https://www.securityfocus.com/bid/16789/info Web Calendar Pro is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Noah's Classifieds 1.0/1.3 - Search Page SQL Injection

source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the application, access...

Noahs Classifieds 1.01.3 - Search Page SQL Injection

Noahs Classifieds 1.01.3 - Search Page SQL Injection source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

PostNuke 0.6x0.7x NS-Languages Module - language SQL Injection

PostNuke 0.6x0.7x NS-Languages Module - language SQL Injection source: https://www.securityfocus.com/bid/16752/info PostNuke is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. Successful exploitation...

BirthSys 3.1 - Multiple SQL Injections

BirthSys 3.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/16684/info BirthSys is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

RunCMS 1.2/1.3 - 'PMLite.php' SQL Injection

source: https://www.securityfocus.com/bid/16652/info RunCMS is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the...

Lawrence Osiris DB_eSession 1.0.2 - Class SQL Injection

source: https://www.securityfocus.com/bid/16598/info DBeSession is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the application, access or modi...

XMB Forum 1.8/1.9 - 'u2u.php?Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16604/info XMB Forum is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Successful exploits of these vulnerabilities could...

HiveMail 1.2.21.3 - folders.update.php?folderid Arbitrary PHP Command Execution

HiveMail 1.2.21.3 - folders.update.php?folderid Arbitrary PHP Command Execution source: https://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL injection...

Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection

Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection source: https://www.securityfocus.com/bid/16544/info Whomp! Real Estate Manager is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in ...