6393 matches found
PHP-Nuke 6.x7.x - Multiple SQL Injections
PHP-Nuke 6.x7.x - Multiple SQL Injections source: https://www.securityfocus.com/bid/10135/info Reportedly PHP-Nuke is prone to multiple SQL injection vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied input. As a result of these issues an...
Cactusoft CactuShop 5.05.1 - SQL Injection
Cactusoft CactuShop 5.05.1 - SQL Injection source: https://www.securityfocus.com/bid/10019/info Reportedly CactuShop is prone to a remote SQL injection vulnerability. This issue is due to a failure to properly sanitize user-supplied URI input before using it to craft an SQL query. As a result of...
Cactusoft CactuShop 5.0/5.1 - SQL Injection
source: https://www.securityfocus.com/bid/10019/info Reportedly CactuShop is prone to a remote SQL injection vulnerability. This issue is due to a failure to properly sanitize user-supplied URI input before using it to craft an SQL query. As a result of this, a malicious user may influence databa...
Expinion.net Member Management System 2.1 - news_view.asp?ID SQL Injection
Expinion.net Member Management System 2.1 - newsview.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into...
Expinion.net Member Management System 2.1 - resend.asp?ID SQL Injection
Expinion.net Member Management System 2.1 - resend.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into databas...
Mambo Open Source 4.5 - index.php SQL Injection
Mambo Open Source 4.5 - index.php SQL Injection source: https://www.securityfocus.com/bid/9891/info It has been reported that the Mambo 'index.php' script is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. As...
Mambo Open Source 4.5 - 'index.php' SQL Injection
source: https://www.securityfocus.com/bid/9891/info It has been reported that the Mambo 'index.php' script is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. As a result of this a malicious user may influence...
IP3 Networks IP3 NetAccess Appliance - SQL Injection
source: https://www.securityfocus.com/bid/9858/info The IP3 NetAccess Appliance is reported prone to a remote SQL-injection vulnerability. This issue is due to the application's failure to properly sanitize user input. This issue may allow an attacker to gain full control of the appliance through...
IP3 Networks IP3 NetAccess Appliance - SQL Injection
IP3 Networks IP3 NetAccess Appliance - SQL Injection source: https://www.securityfocus.com/bid/9858/info The IP3 NetAccess Appliance is reported prone to a remote SQL-injection vulnerability. This issue is due to the application's failure to properly sanitize user input. This issue may allow an...
XMB Forum 1.8 - 'editprofile.php?user' Cross-Site Scripting
source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...
eCommerce Corporation Online Store Kit 3.0 - shop_by_brand.php?cat_manufacturer SQL Injection
eCommerce Corporation Online Store Kit 3.0 - shopbybrand.php?catmanufacturer SQL Injection source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of...
YABB SE 1.5 - Quote SQL Injection
YABB SE 1.5 - Quote SQL Injection source: https://www.securityfocus.com/bid/9674/info It has been reported that YaBB SE may be prone to a SQL injection vulnerability that may allow a remote user to inject arbitrary SQL queries into the database used by the software. YaBB SE versions 1.5.4 and 1.5...
BosDev BosDates 3.x - SQL Injection
BosDev BosDates 3.x - SQL Injection source: https://www.securityfocus.com/bid/9639/info An SQL injection vulnerability has been reported to affect BosDates calendar system. The issue arises due to insufficient sanitization of user supplied data. As a result of this issue an attacker could modify...
YABB SE 1.x - 'SSI.php' ID_MEMBER SQL Injection
source: https://www.securityfocus.com/bid/9449/info A problem with YaBB SE could make it possible for a remote user launch SQL injection attacks. It has been reported that a problem exists in the SSI.php script distributed as part of YaBB SE. Due to insufficient sanitizing of user-supplied URI...
osCommerce 2.2 - 'products_id' SQL Injection
source: https://www.securityfocus.com/bid/9275/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. It has been reported that an attacker may supply malicious SQL queries as a URI...
Mambo Open Source 4.0.14 - PollBooth.php Multiple SQL Injections
Mambo Open Source 4.0.14 - PollBooth.php Multiple SQL Injections source: https://www.securityfocus.com/bid/9197/info Mambo Open Source is prone to SQL injection attacks. This is due to an input validation error in 'pollBooth.php'. In particular, various user-supplied variables are used in an SQL...
Mambo Open Source 4.0.14 Server - SQL Injection
Mambo Open Source 4.0.14 Server - SQL Injection source: https://www.securityfocus.com/bid/9196/info It has bee reported that Mambo Open Source 4.0.14 Server is prone to SQL injection attacks. The problem is said to occur due to insufficient sanitization of data passed to specific index.php...
VieNuke VieBoard 2.6 - SQL Injection
VieNuke VieBoard 2.6 - SQL Injection source: https://www.securityfocus.com/bid/8967/info It has been reported that VieNuke VieBoard may be prone to a SQL injection vulnerability that may allow an attacker to disclose sensitive information by supplying malicious SQL code to the underlying database...
VieNuke VieBoard 2.6 - SQL Injection
source: https://www.securityfocus.com/bid/8967/info It has been reported that VieNuke VieBoard may be prone to a SQL injection vulnerability that may allow an attacker to disclose sensitive information by supplying malicious SQL code to the underlying database. A malicious user may influence...
