Mailutils: SQL Injection

Background GNU Mailutils is a collection of mail-related utilities. Description When GNU Mailutils is built with the "mysql" or "postgres" USE flag, the sqlescapestring function of the authentication module fails to properly escape the "" character, rendering it vulnerable to a SQL command...

Early Impact ProductCart 2.62.7 - viewPrd.asp?idcategory SQL Injection

Early Impact ProductCart 2.62.7 - viewPrd.asp?idcategory SQL Injection source: https://www.securityfocus.com/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it...

Active News Manager - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13759/info Active News Manager is prone to an SQL injection vulnerability. This issue affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to...

Spread The Word - Multiple SQL Injections

source: https://www.securityfocus.com/bid/13737/info Spread The Word is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromi...

Woltlab Burning Board SQL Injection Vulnerability

GulfTech Security Research May 16th, 2005 Vendor : Woltlab GmbH URL : http://www.woltlab.de/ Version : Burning Board 2. And Earlier Risk : SQL Injection Vulnerabilities Description: Burning Board is a popular, multi purpose forum / community software offered by WoltLab GmbH. There is an SQL...

Shop-Script - categoryId SQL Injection

Shop-Script - categoryId SQL Injection source: https://www.securityfocus.com/bid/13633/info Shop-Script is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Shop-Script - ProductID SQL Injection

Shop-Script - ProductID SQL Injection source: https://www.securityfocus.com/bid/13635/info Shop-Script is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

JGS-Portal 3.0.13.0.2 - jgs_portal_mitgraf.php?year SQL Injection

JGS-Portal 3.0.13.0.2 - jgsportalmitgraf.php?year SQL Injection source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied inpu...

OpenBB 1.0.8 - 'Read.php' SQL Injection

source: https://www.securityfocus.com/bid/13624/info OpenBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

DirectTopics 2 - topic.php SQL Injection

DirectTopics 2 - topic.php SQL Injection source: https://www.securityfocus.com/bid/13608/info DirectTopics is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...

MidiCart PHP - Search_List.php?SearchString SQL Injection

MidiCart PHP - SearchList.php?SearchString SQL Injection source: https://www.securityfocus.com/bid/13512/info MidiCart PHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

MidiCart PHP - 'Item_List.php?SecondGroup' SQL Injection

source: https://www.securityfocus.com/bid/13514/info MidiCart PHP is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data...

Maxwebportal 1.3 - 'links_popular.asp' SQL Injection

source: https://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in...

JGS-Portal 3.0.1 - 'ID' SQL Injection

source: https://www.securityfocus.com/bid/13451/info JGS-Portal is prone to an SQL injection. This issue may potentially be exploited to compromise the software or gain unauthorized access to the database. The consequences of exploitation will depend on the nature of the vulnerable SQL query and...

CartWIZ 1.10 - searchresults.asp idcategory Argument SQL Injection

CartWIZ 1.10 - searchresults.asp idcategory Argument SQL Injection source: https://www.securityfocus.com/bid/13335/info CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an...

CartWIZ 1.10 - searchresults.asp PriceFrom Argument SQL Injection

CartWIZ 1.10 - searchresults.asp PriceFrom Argument SQL Injection source: https://www.securityfocus.com/bid/13334/info CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an S...

ECommPro 3.0 - Adminlogin.asp SQL Injection

ECommPro 3.0 - Adminlogin.asp SQL Injection source: https://www.securityfocus.com/bid/13274/info EcommProV3 is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitati...

DUportal Pro 3.4 - 'default.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13285/info DUportal Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

DUportal Pro 3.4 - 'detail.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13285/info DUportal Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

phpBB-Auction Module 1.0/1.2 - 'Auction_Rating.php' SQL Injection

source: https://www.securityfocus.com/bid/13283/info phpbb-auction module is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...