Web4Future Affiliate Manager PRO 4.1 - 'functions.php' SQL Injection

source: https://www.securityfocus.com/bid/15717/info Affiliate Manager PRO is prone to an SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromis...

Hobosworld HobSR - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15713/info Hobosworld HobSR is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

Web4Future Portal Solutions - 'Comentarii.php' SQL Injection

source: https://www.securityfocus.com/bid/15716/info Portal Solutions is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

NetClassifieds Standard 1.9Professional 1.5Premium 1.0 - ViewItem.php?ItemNum SQL Injection

NetClassifieds Standard 1.9Professional 1.5Premium 1.0 - ViewItem.php?ItemNum SQL Injection source: https://www.securityfocus.com/bid/15683/info NetClassifieds is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it...

DotClear 1.2.11.2.2 - Session.php SQL Injection

DotClear 1.2.11.2.2 - Session.php SQL Injection source: https://www.securityfocus.com/bid/15667/info DotClear is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PHPMyChat 0.14.6 - style.css.php?medium Cross-Site Scripting

PHPMyChat 0.14.6 - style.css.php?medium Cross-Site Scripting source: https://www.securityfocus.com/bid/15679/info phpMyChat is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Extreme Corporate 6.0 - 'Extremesearch.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15675/info Extreme Search Corporate Edition is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

PHPMyChat 0.14.6 - 'start_page.css.php?medium' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15679/info phpMyChat is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

SocketKB 1.1 - index.php SQL Injection

SocketKB 1.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/15650/info SocketKB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation coul...

PHPX 3.5.x - 'Admin 'login.php' SQL Injection

source: https://www.securityfocus.com/bid/15680/info PHPX is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the application...

Survey System 1.1 - survey.php SQL Injection

Survey System 1.1 - survey.php SQL Injection source: https://www.securityfocus.com/bid/15641/info Survey System is prone to multiple SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Orca KnowledgeBase 2.1 - 'KnowledgeBase.php' SQL Injection

source: https://www.securityfocus.com/bid/15637/info Orca Knowledgebase is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of t...

Softbiz Resource Repository Script - showcats.php?sbcat_id SQL Injection

Softbiz Resource Repository Script - showcats.php?sbcatid SQL Injection source: https://www.securityfocus.com/bid/15585/info Softbiz Resource Repository Script is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

ShockBoard 3.0/4.0 - 'Offset' SQL Injection

source: https://www.securityfocus.com/bid/15592/info ShockBoard is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Athena PHP Website Administration 0.1 - Remote File Inclusion

source: https://www.securityfocus.com/bid/15574/info Athena PHP Website Administration is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP co...

Q-News 2.0 - Remote File Inclusion

source: https://www.securityfocus.com/bid/15576/info Q-News is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer...

PBLang Bulletin Board System 4.65 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/15573/info PBLang is prone to multiple HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...

PmWiki 2.0.x - Search Cross-Site Scripting

PmWiki 2.0.x - Search Cross-Site Scripting source: https://www.securityfocus.com/bid/15539/info PmWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...

PHPPost 1.0 - profile.php?user Cross-Site Scripting

PHPPost 1.0 - profile.php?user Cross-Site Scripting source: https://www.securityfocus.com/bid/15524/info PHP-Post is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

PHPPost 1.0 - mail.php?user Cross-Site Scripting

PHPPost 1.0 - mail.php?user Cross-Site Scripting source: https://www.securityfocus.com/bid/15524/info PHP-Post is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitra...