NuclearBB Alpha 1 Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23555/info NuclearBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

vBulletin 4.0.1 'misc.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37854/info vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! and Mambo Joo!BB 0.5.9 Component - 'forum' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29475/info The Joo!BB component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

E-Annu Home.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23727/info E-Annu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! and Mambo 'com_salesrep' Component - 'rid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27827/info The Joomla! and Mambo 'comsalesrep' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Softbiz Classifieds Script Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32375/info Softbiz Classifieds Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

Links Pile - 'link.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29223/info Links Pile is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

PHP TopSites 2.0/2.2 edit.php SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6625/info A vulnerability has been discovered in PHP TopSites. Due to insufficient sanitization of user-supplied URI parameters it is possible for an attacker to embed SQL commands into certain page requests. This may...

PHP-Nuke 4ndvddb 0.91 Module 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30120/info The '4ndvddb' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

okul siteleri 'com_mezun' Component SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27755/info 'okul siteleri' is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

Moodle Blog 1.18.2.2/1.6.2 Module SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20395/info Moodle is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application, access or modify data, ...

OpenDocMan 1.2.5 index.php last_message Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Seditio 1.10 Users.Profile.Inc.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21232/info Seditio is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

GENU CMS SQL Injection Vulnerability

0x01 漏洞版本软件下载 下载地址： http://www.gnew.fr/pages/download.php?file=GENU-2012.3.tar.gz 0x02 漏洞代码 read.php include'./../includes/common.php'; pageheader'ARTICLESREADTITLE'; if isset'articleid' -query'SELECT ' . TABLEARTICLES . '.articledate, ' . TABLEARTICLES . '.articlesubject, ' . TABLEARTICLES...

ibProArcade 2.5.9+ Arcade.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22575/info ibProArcade is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

itMedia Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/30740/info itMedia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

CMS Easyway - 'mid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29461/info CMS Easyway is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Joomla! 'com_mygallery' Component - 'cid' Parameter SQL Injection Vulnerability

No description provided by source. Bugtraq ID: 37121 Class: Input Validation Error Published: Feb 21 2008 12:00AM Updated: Nov 24 2009 10:15PM Credit: S@BUN Vulnerable: Joomla commygallery 0 The 'commygallery' component for Joomla! is prone to an SQL-injection vulnerability because it fails to...

Phorum 5.0.x FOLLOW.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11660/info Reportedly Phorum is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitized user supplied URI input. This issue allows remote attackers to...

WinSoftMagic Photo Editor PNG File Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39354/info WinSoftMagic Photo Editor is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. Successful...