PT-2013-5370

Name of the Vulnerable Software and Affected Versions PHPFox versions prior to 3.6.0 build4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the searchgender parameter to the "/user/browse/view /" API endpoint. Recommendations For versions prio...

UAMS Alerts Patients to Data Breach Linked to Fired Resident

The University of Arkansas for Medical Sciences is letting some 1,500 patients know their information was kept without permission by a resident physician after she was terminated. The health care facility plans to mail impacted patients who had surgery or were seen by a neurosurgeon from January ...

Most Smartphone Users Consider Privacy When Vetting Apps

Cellphone owners now account for 88 percent of the U.S. population, of which some 43 percent say they download applications on their phones. Among these ‘app users,’ 57 percent told the Pew Internet and American Life Project that they have either uninstalled existing applications or made the...

Study: Password Security Improves with Age

Baby Boomers may not be perceived as tech savvy as Millenials, but they apparently are better at protecting their digital assets. A new British study believed to be the largest of its kind shows those 55 and older tend to pick passwords with twice the strength of those under 25. It also indicates...

Sql injection

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

CVE-2010-4870

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

PT-2011-1805

Name of the Vulnerable Software and Affected Versions BloofoxCMS version 0.3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the gender parameter in the "index.php" endpoint. Recommendations For BloofoxCMS version 0.3.5, consider restricting...

CVE-2010-4870: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

IC3: Internet Crime Up in 2010

Internet crime is on the rise again according to a report recently released by The Internet Crime Complaint Center IC3. The organization said last week that it received the second-highest number of complaints in its decade long history in 2010. Released on February 24, the 2010 Internet Crime...

BloofoxCMS 0.3.5 SQL Injection

Vulnerability ID: HTB22658 Reference: http://www.htbridge.ch/advisory/sqlinjectioninbloofoxcmsregistrationplugin.html Product: BloofoxCMS Vendor: bloofox.com http://bloofox.com/ Vulnerable Version: 0.3.5 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: SQL...

BloofoxCMS Registration Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== BloofoxCMS Registration Plugin SQL Injection Vulnerability ========================================================== Reference:...

BloofoxCMS Registration Plugin - SQL Injection

BloofoxCMS Registration Plugin - SQL Injection Vulnerability ID: HTB22658 Reference: http://www.htbridge.ch/advisory/sqlinjectioninbloofoxcmsregistrationplugin.html Product: BloofoxCMS Vendor: bloofox.com http://bloofox.com/ Vulnerable Version: 0.3.5 and probably prior versions Vendor Notificatio...

BloofoxCMS Registration Plugin - SQL Injection

Vulnerability ID: HTB22658 Reference: http://www.htbridge.ch/advisory/sqlinjectioninbloofoxcmsregistrationplugin.html Product: BloofoxCMS Vendor: bloofox.com http://bloofox.com/ Vulnerable Version: 0.3.5 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: SQL...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 browseladies.php and 2 browsemen.php, the 3 gender parameter to search.php, and the 4 id parameter to services.php...

CVE-2009-2882

Multiple cross-site scripting XSS vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 browseladies.php and 2 browsemen.php, the 3 gender parameter to search.php, and the 4 id parameter to services.php...

Vastal I-Tech Shaadi Zone 1.0.9 - tage SQL Injection

Vastal I-Tech Shaadi Zone 1.0.9 - tage SQL Injection Vastal I Tech Shaadi Zone 1.0.9 SQL Injection Vulnerability By: e.wiZz! Site: infected.blogger.ba Info: Bosnian Idiot FTW! Greetz: str0ke,aluigi,suN8Hclf,0in,Rishi Narang,f34r In the wild... Info: Shaadi Zone is the best solution if you are...

Pictures Rating (index.php msgid) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications =================================================================== Pictures Rating index.php msgid Remote SQL Injection Vulnerbility ===================================================================...

CVE-2002-2176

The CVE-2002-2176 entry concerns Gender MOD 1.1.3, where a SQL injection vulnerability in the User Profile page (via the user_level parameter) allows remote attackers to gain administrative access. The vulnerability stems from improper handling of user_level input in the profile interface, enabli...

CVE-2002-2176

SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the userlevel parameter in the User Profile page...

CVE-2002-2176: Undefined Security Weakness

SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the userlevel parameter in the User Profile page...