Joomla! Component EXP Shop 1.0 - SQL Injection

Joomla! Component EXP Shop 1.0 - SQL Injection source: https://www.securityfocus.com/bid/29869/info The EXP Shop component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

phpAuction - profile.php SQL Injection (2)

phpAuction - profile.php SQL Injection 2 source: https://www.securityfocus.com/bid/29856/info PHPAuction is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

phpmycart-sql.txt

PHPMyCart Injection Vulnerability Bug by: h0yt3r Script suffers from a not correctly verified category id variable which is used in SQL Querys. An Attacker can easily get sensitive information from the database by injecting unexpected SQL Querys. We dont get any SQL Errors when the Injection Quer...

revokebbrc11-sql.txt

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a public Exploit...

AbleSpace 1.0 - 'adv_cat.php' SQL Injection

source: https://www.securityfocus.com/bid/29369/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

mxsystem-sql.txt

Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC : http://target/path/index.php?page=-1+union+select+1,2,3,4,5,concatwschar58,version,user,now/...

eCMS 0.4.2 - Multiple Vulnerabilities

eCMS 0.4.2 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/29304/info eCMS is prone to multiple security vulnerabilities, including a security-bypass issue and an SQL-injection issue. Exploiting these issues may allow an attacker to bypass certain security restrictions and ga...

OtherLogic - 'vocourse.php' SQL Injection

source: https://www.securityfocus.com/bid/29139/info OtherLogic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

LiveCart 目录脚本id参数SQL注入漏洞

BUGTRAQ ID: 28723 CVECAN ID: CVE-2008-1750 LiveCart是用于创建在线商店的电子商务解决方案。 LiveCart的目录脚本中没有正确地验证对id参数的输入便将其用在了SQL查询中，这允许远程攻击者通过控制SQL查询请求执行SQL注入攻击。 UAB Integry Systems LiveCart 1.1.1 UAB Integry Systems ------------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://livecart.com/...

BatmanPorTaL - 'uyeadmin.asp?id' SQL Injection

source: https://www.securityfocus.com/bid/29057/info BatmanPorTaL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or...

iGaming CMS 1.5 - 'poll_vote.php' SQL Injection

source: https://www.securityfocus.com/bid/29059/info iGaming CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

XOOPS 2.0.14 Article Module - article.php SQL Injection

XOOPS 2.0.14 Article Module - article.php SQL Injection source: https://www.securityfocus.com/bid/28879/info XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

osCommerce Poll Booth 2.0 AddOn - pollbooth.php SQL Injection

osCommerce Poll Booth 2.0 AddOn - pollbooth.php SQL Injection source: https://www.securityfocus.com/bid/28752/info osCommerce Poll Booth is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Joomla! Mambo Component Showroom Joomlearn LMS - cat SQL Injection

Joomla! Mambo Component Showroom Joomlearn LMS - cat SQL Injection source: https://www.securityfocus.com/bid/28586/info The Joomlearn LMS component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an S...

Iatek Knowledge Base - content_by_cat.asp SQL Injection

Iatek Knowledge Base - contentbycat.asp SQL Injection source: https://www.securityfocus.com/bid/28376/info Iatek Knowledge Base is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

MAXdev My eGallery Module 3.04 - For Xoops 'gid' SQL Injection

source: https://www.securityfocus.com/bid/28220/info MAXdev My eGallery module for Xoops is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! / Mambo Component ensenanzas - 'id' SQL Injection

source: https://www.securityfocus.com/bid/28196/info The 'ensenanzas' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

Joomla! Mambo Component ensenanzas - id SQL Injection

Joomla! Mambo Component ensenanzas - id SQL Injection source: https://www.securityfocus.com/bid/28196/info The 'ensenanzas' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

PHP-Nuke Hadith Module - cat SQL Injection

PHP-Nuke Hadith Module - cat SQL Injection source: https://www.securityfocus.com/bid/28171/info The Hadith module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

Joomla! / Mambo Component com_inter - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27994/info The Joomla! and Mambo 'cominter' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...