ProjectPier 0.8 - Multiple HTML Injection Cross-Site Scripting Vulnerabilities

ProjectPier 0.8 - Multiple HTML Injection Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27857/info ProjectPier is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker m...

RunCMS 1.6.1 - admin.php Cross-Site Scripting

RunCMS 1.6.1 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27852/info RunCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in th...

WordPress Plugin Recipes Blog - id SQL Injection

WordPress Plugin Recipes Blog - id SQL Injection source: https://www.securityfocus.com/bid/27856/info The WordPress Recipes Blog plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

WordPress Plugin wp-people 2.0 - 'wp-people-popup.php' SQL Injection

source: https://www.securityfocus.com/bid/27858/info The WordPress 'wp-people' plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

Joomla! Mambo Component com_lexikon - id SQL Injection

Joomla! Mambo Component comlexikon - id SQL Injection source: https://www.securityfocus.com/bid/27828/info The Joomla! and Mambo 'comlexikon' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiti...

Power Phlogger 2.2.x - Cross-Site Scripting

Power Phlogger 2.2.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/37150/info Power Phlogger is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attackers can exploit this issue to steal cookie-based...

BanPro Dms 1.0 - index.php Local File Inclusion

BanPro Dms 1.0 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/27831/info BanPro DMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to...

Joomla! Mambo Component com_smslist - listid SQL Injection

Joomla! Mambo Component comsmslist - listid SQL Injection source: https://www.securityfocus.com/bid/27818/info The Joomla! and Mambo 'comsmslist' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! Mambo Component com_scheduling - id SQL Injection

Joomla! Mambo Component comscheduling - id SQL Injection source: https://www.securityfocus.com/bid/27830/info The Joomla! and Mambo 'comscheduling' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! Mambo Component faq - catid SQL Injection

Joomla! Mambo Component faq - catid SQL Injection source: https://www.securityfocus.com/bid/27822/info The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this iss...

Joomla! / Mambo Component com_scheduling - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27830/info The Joomla! and Mambo 'comscheduling' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Joomla! / Mambo Component com_salesrep - 'rid' SQL Injection

source: https://www.securityfocus.com/bid/27827/info The Joomla! and Mambo 'comsalesrep' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Joomla! / Mambo Component com_activities - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27820/info The Joomla! and Mambo 'comactivities' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Joomla! / Mambo Component faq - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/27822/info The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! / Mambo Component com_smslist - 'listid' SQL Injection

source: https://www.securityfocus.com/bid/27818/info The Joomla! and Mambo 'comsmslist' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

Joomla! Mambo Component com_omnirealestate - objid SQL Injection

Joomla! Mambo Component comomnirealestate - objid SQL Injection source: https://www.securityfocus.com/bid/27783/info The 'comomnirealestate' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in a...

Joomla! Mambo Component com_model - objid SQL Injection

Joomla! Mambo Component commodel - objid SQL Injection source: https://www.securityfocus.com/bid/27781/info The Joomla! and Mambo 'commodel' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploitin...

Joomla! / Mambo Component com_model - 'objid' SQL Injection

source: https://www.securityfocus.com/bid/27781/info The Joomla! and Mambo 'commodel' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

artmedic weblog artmedic_print.php date Parameter XSS

artmedic weblog artmedicprint.php date Parameter XSS. CVE-2008-0765. Webapps exploit for php platform source: http://www.securityfocus.com/bid/27745/info artmedic webdesign weblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. ...

Joomla! Mambo Component com_iomezun - id SQL Injection

Joomla! Mambo Component comiomezun - id SQL Injection source: https://www.securityfocus.com/bid/27748/info The Joomla! and Mambo 'comiomezun' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiti...