Flexi Quote Rotator - Cross-Site Request Forgery & SQL Injection Vulnerabilities

The Flexi Quote Rotator WordPress plugin was affected by a Cross-Site Request Forgery & SQL Injection Vulnerabilities security vulnerability...

QUOTE&ORDERING SYSTEM 1.0 (ordernum) Multiple Vulnerabilities

No description provided by source. Title : QUOTE&ORDERING SYSTEM 1.0 ordernum Multiple Vulnerabilities Author : ajann Contact : : S.Page : ... $$ : $250.00 SQL--------------------------------------------------------- Register & Login Before Injection.. http://target/path//search.asp?ordernum=SQL...

PageSquid CMS (index.php page) 0.3 Beta - Remote SQL Injection Vulnerability

No description provided by source. ===================================================================== PageSquid CMS index.php page Remote SQL Injection Vulnerability ===================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

MyPHP Forum <= 3.0 Edit Topics/Blind SQL Injection Vulnerabilities

No description provided by source. / ----------------------------------------------------------------------------------- MyPHP Forum Final = 3.0 Edit Topics/Blind SQL Injection Remote Vulnerabilities ----------------------------------------------------------------------------------- Discovered By...

Standard & Poors ComStock 4.2.4 Machine Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/1080/info Numerous vulnerabilities exist in the ComStock product, as sold by Standard & Poor's. ComStock is based on the RedHat 5.1 distribution, and contains many of the vulnerabilities found in the 5.1 distribution. In...

WF-Quote 1.0 Xoops Module Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23845/info The WF-Quote module for the Xoops CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

Java Web Start Double Quote Injection Remote Code Execution

No description provided by source. ======================================================== Java Web Start Double Quote Inject Remote Code Execution ======================================================== Date: Jun 12 2012 updated: Jun 6 2013 Author: Rh0 Version: At least Java 1.6.31 to 1.6.35 a...

phpslash <= 0.8.1.1 - Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q ?php phpslash = 0.8.1.1 Remote Code Execution Exploit - - - - - - - - - - - - - - - - - - - - - - - - - RCE with no special rights guest. No special PHP conditions required. - - - - - - - - - - - - - - - - - - - - - - - - - 0 It was a private...

ownrs blog beta3 (sql/xss) Multiple Vulnerabilities

No description provided by source. ============================================================== OwnRS Blog beta3 SQL/XSS Multiple Remote Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

smbind <= 0.4.7 - SQL Injection Vulnerability

No description provided by source. smbind = v.0.4.7 Sql Injection Site: https://sourceforge.net/projects/smbind/files/ Reported on 28/08/2010 Author: IHTeam Buggy code: ifisset$POST'username' && isset$POST'password' if!filteralphanum, $POST'username' or !filteralphanum, $POST'password' dieUsernam...

Sisplet CMS (index.php id) 2008-01-24 - Remote SQL Injection Vulnerability

No description provided by source. ================================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...

Log1 CMS 2.0 - Multiple Vulnerabilities

No description provided by source. +---------------------------------------+ | Log1 CMS 2.0 Multiple Vulnerabilities | +---------------------------------------+ Vulnerable Web-App : Log1 CMS 2.0 Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email :...

Apache Tomcat <= 6.0.15 Cookie Quote Handling Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27706/info Apache Tomcat is prone to an information-disclosure vulnerability because it fails to adequately sanitize user-supplied data. Attackers can exploit this issue to access potentially sensitive data that may aid i...

YABB SE 1.5 Quote Parameter SQL Injection Vulnerability

No description provided by source...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on April 7, 2014

Medium Alert ID: 33673 First Published: 2014 April 7 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote request for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Product Quote Change Request Email Messages on March 18, 2014

Medium Alert ID: 33396 First Published: 2014 March 18 19:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote change request for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on March 2, 2014

Medium Alert ID: 33153 First Published: 2014 March 4 15:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation request for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Product Quote Email Messages on February 19, 2014.

Medium Alert ID: 32938 First Published: 2014 February 20 20:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation request for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on November 8, 2013

Medium Alert ID: 31686 First Published: 2013 November 8 17:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation request for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on October 28, 2013

Medium Alert ID: 31522 First Published: 2013 October 29 19:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation request for the recipient. The text in the email message attempts to convince the recipien...