1229 matches found
K Web CMS 'sayfala.asp' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30745/info K Web CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
W2B phpHotResources - 'cat.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28736/info W2B phpHotResources is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
AdMan 1.0.20051221 ViewStatement.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17208/info AdMan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
EvoTopsite 2.0 Index.PHP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17893/info evoTopsite is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploits...
LinksPro 'OrderDirection' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33305/info LinksPro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Logaholic profiles.php newconfname Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27003/info Logaholic is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues, a cross-site scripting issue, and an HTML-injection issue. The issues occur because the application fail...
CustomCMS 3.1 'vars.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27069/info CustomCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Scott Manktelow Design Stride 1.0 Content Management System Main.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26041/info Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...
bcoos 1.0.10 /myalbum/ratephoto.php lid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/26629/info The 'bcoos' program is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. These...
Joomla! and Mambo 'com_most' Component - 'secid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27922/info The Joomla! and Mambo 'commost' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...
Unique Ads Banner.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22164/info Unique Ads is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
PHP-Nuke Downloads Module - 'sid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27932/info The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
LANAI CMS 1.2.14 GALLERY Module gid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/25193/info LANAI CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
XOOPS 'prayerlist' Module - 'cid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27934/info XOOPS 'prayerlist' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...
MyBB 1.4.8 'search.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36460/info MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
e107 0.7.x 'e107_admin/banner.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39609/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
NewsHOWLER 1.03 Cookie Data SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30732/info NewsHOWLER is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
Uni-vert PhpLeague 0.82 Joueurs.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19880/info Uni-vert PhpLeague is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. This issue may allow an attacker to compromise the application, access or modify data,...
FuseTalk 2.0/3.0 AuthError.CFM SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24528/info FuseTalk is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
Dizi Portali 'film.asp' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32239/info Dizi Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...