PHPYellowTM 5.33 - 'print_me.php?ckey' SQL Injection

source: https://www.securityfocus.com/bid/15700/info phpYellowTM is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise ...

PHP-Fusion 6.0.109 - messages.php SQL Injection

PHP-Fusion 6.0.109 - messages.php SQL Injection source: https://www.securityfocus.com/bid/15698/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PHPYellowTM 5.33 - 'search_result.php?haystack' SQL Injection

source: https://www.securityfocus.com/bid/15700/info phpYellowTM is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise ...

PHPMyChat 0.14.6 - 'users_popupL.php?From' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15679/info phpMyChat is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

PHPMyChat 0.14.6 - start_page.css.php?medium Cross-Site Scripting

PHPMyChat 0.14.6 - startpage.css.php?medium Cross-Site Scripting source: https://www.securityfocus.com/bid/15679/info phpMyChat is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues t...

Internet Explorer onload window vulnerability

Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...

SoftBiz FAQ 1.1 - 'faq_qanda.php?id' SQL Injection

source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...

SocketKB 1.1 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15650/info SocketKB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

88Scripts Event Calendar 2.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15658/info 88Scripts Event Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromis...

Bedeng PSP 1.1 - index.php?a.nsub SQL Injection

Bedeng PSP 1.1 - index.php?a.nsub SQL Injection source: https://www.securityfocus.com/bid/15583/info Bedeng PSP is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

BerliOS SourceWell 1.1.3 - SQL Injection

BerliOS SourceWell 1.1.3 - SQL Injection source: https://www.securityfocus.com/bid/15586/info BerliOS SourceWell is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

OvBB 0.x - 'profile.php?userid' SQL Injection

source: https://www.securityfocus.com/bid/15566/info OvBB is prone to multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying databas...

blogBuddies 0.3 - 'index.php?u' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15555/info blogBuddies is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...

PHPPost 1.0 - mail.php?user Cross-Site Scripting

PHPPost 1.0 - mail.php?user Cross-Site Scripting source: https://www.securityfocus.com/bid/15524/info PHP-Post is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitra...

APBoard - 'thread.php' SQL Injection

source: https://www.securityfocus.com/bid/15513/info APBoard is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before it is used in SQL queries. Successful exploitation could result in a compromise of the application, disclosure or...

PHPPost 1.0 - 'profile.php?user' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15524/info PHP-Post is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

XMB Forum 1.9.3 - u2u.php Cross-Site Scripting

XMB Forum 1.9.3 - u2u.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15342/info XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Buffer Overrun in Messenger Service (828035)

A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. This plugin determined by reading the remote registry that the patch MS03-043 has not been applied. SPDX-FileCopyrightText: 2003 Jeff Adams Some text descriptions might be...

DotNetNuke < 3.0.12 Multiple HTML Injection Vulnerabilities

DotNetNuke contains several input validation flaws leading to the execution of attacker supplied HTML and script code. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MDaemon IMAP Server DoS Vulnerability (CVE-2001-0584)

It is possible to crash the remote MDaemon IMAP server by sending a too long argument to the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...