2880 matches found
Cerberus Helpdesk 2.649 - cer_KnowledgebaseHandler.class.php?_load_article_details SQL Injection
Cerberus Helpdesk 2.649 - cerKnowledgebaseHandler.class.php?loadarticledetails SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of...
Jax Calendar 1.34 - 'jax_calendar.php' SQL Injection
source: https://www.securityfocus.com/bid/16130/info Jax Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
Quick Square Development Honeycomb Archive 3.0 - 'CategoryResults.cfm' Multiple SQL Injections
source: https://www.securityfocus.com/bid/15995/info HoneyComb Archive is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromis...
jPORTAL 2.2.12.3 Forum - forum.php SQL Injection
jPORTAL 2.2.12.3 Forum - forum.php SQL Injection source: https://www.securityfocus.com/bid/15925/info JPortal Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Bitweaver 1.1.1 Beta - list_galleries.php?sort_mode Cross-Site Scripting
Bitweaver 1.1.1 Beta - listgalleries.php?sortmode Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...
Acidcat CMS 2.1.13 - 'acidcat.mdb' Remote Information Disclosure
source: https://www.securityfocus.com/bid/15933/info Acidcat CMS is prone to multiple input validation vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. Successful exploitation could result in a compromise of the application, disclosure or modification...
jPORTAL 2.2.1/2.3 Forum - 'forum.php' SQL Injection
source: https://www.securityfocus.com/bid/15925/info JPortal Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/15966/info Komodo CMS is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of th...
Community Enterprise 4.x - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/15963/info Community Enterprise is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a...
Miraserver 1.0 RC4 - 'index.php?page' SQL Injection
source: https://www.securityfocus.com/bid/15960/info Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...
TML 0.5 - 'index.php?form' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15876/info TML CMS is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication...
QuickPayPro 3.1 - customer.tickets.view.php Multiple SQL Injections
QuickPayPro 3.1 - customer.tickets.view.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...
ASPBB 0.4 - topic.asp?TID SQL Injection
ASPBB 0.4 - topic.asp?TID SQL Injection source: https://www.securityfocus.com/bid/15859/info ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
QuickPayPro 3.1 - 'subscribers.tracking.edit.php?subtrackingid' SQL Injection
source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of t...
QuickPayPro 3.1 - sales.view.php?customerid SQL Injection
QuickPayPro 3.1 - sales.view.php?customerid SQL Injection source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation ...
Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting
Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...
McGallery 1.01.12.2 - index.php?language Traversal Local File Inclusion
McGallery 1.01.12.2 - index.php?language Traversal Local File Inclusion source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successf...
VCD-db 0.9x - 'search.php?by' SQL Injection
source: https://www.securityfocus.com/bid/15840/info VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...
McGallery 1.0/1.1/2.2 - 'index.php?language' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of...
Scout Portal Toolkit 1.3.1 - SPT-UserLogin.php SQL Injection
Scout Portal Toolkit 1.3.1 - SPT-UserLogin.php SQL Injection source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an...