ASCET Interactive Huski Retail - Multiple SQL Injections

source: https://www.securityfocus.com/bid/38129/info Huski Retail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

Interspire Knowledge Manager < 5.1.3 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/38090/info Interspire Knowledge Manager is prone to multiple SQL-injection vulnerabilities, a cross-site scripting vulnerability, and an information-disclosure vulnerability. Exploiting these issues could allow an attacker to obtain sensitive information,...

PonVFTP - login.php SQL Injection

PonVFTP - login.php SQL Injection source: https://www.securityfocus.com/bid/40608/info PonVFTP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Zenoss 2.3.3 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/37802/info Zenoss is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Layout CMS 1.0 SQL-Injection and Cross-Site Scripting Vulnerabilities

Layout CMS 1.0 SQL-Injection and Cross-Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/40415/info Layout CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize...

Pay Per Minute Video Chat Script 2.x - SQL Injection Multiple Cross-Site Scripting Vulnerabilities

Pay Per Minute Video Chat Script 2.x - SQL Injection Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/40585/info Pay Per Minute Video Chat Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to...

pragmaMX 0.1.11 - modules.php Multiple SQL Injections

pragmaMX 0.1.11 - modules.php Multiple SQL Injections source: https://www.securityfocus.com/bid/41523/info pragmaMX is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow ...

VirtueMart 'product_id' Parameter SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= VirtueMart 'productid' Parameter SQL Injection Vulnerability ============================================================= Class: Input Validation Error CVE: Remote: Yes Local: ...

Family Connections Multiple Input Validation Vulnerabilities

Family Connections is prone to multiple input-validation vulnerabilities, including a local file-include issue, an arbitrary file-upload issue, and multiple SQL-injection issues. These issues occur because the application fails to properly sanitize user- supplied input. Exploiting these issues ma...

Pre Jobo.NET - Multiple SQL Injections

Pre Jobo.NET - Multiple SQL Injections source: https://www.securityfocus.com/bid/41747/info Pre Jobo.NET is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker...

CyberCMS - 'faq.php' SQL Injection

source: https://www.securityfocus.com/bid/39698/info Cyber CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

OpenDocMan 1.2.5 - index.php?last_message Cross-Site Scripting

OpenDocMan 1.2.5 - index.php?lastmessage Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

OpenDocMan 1.2.5 - profile.php Cross-Site Scripting

OpenDocMan 1.2.5 - profile.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

OpenDocMan 1.2.5 - toBePublished.php Multiple Cross-Site Scripting Vulnerabilities

OpenDocMan 1.2.5 - toBePublished.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

OpenDocMan 1.2.5 - 'rejects.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

Dream Poll 3.1 - index.php Cross-Site Scripting SQL Injection

Dream Poll 3.1 - index.php Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/36663/info Dream Poll is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based...

Dream Poll 3.1 - '/index.php' Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/36663/info Dream Poll is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modi...

Vastal I-Tech DVD Zone - view_mag.php Cross-Site Scripting

Vastal I-Tech DVD Zone - viewmag.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36487/info DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

Maxwebportal 1.365 - forum.asp SQL Injection

Maxwebportal 1.365 - forum.asp SQL Injection source: https://www.securityfocus.com/bid/36480/info MaxWebPortal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Vastal I-Tech Cosmetics Zone - 'view_products.php' SQL Injection

source: https://www.securityfocus.com/bid/36485/info Cosmetics Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...