SaffaTunes CMS - 'news.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/40995/info SaffaTunes CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

Joomla! Component Gallery XML 1.1 - SQL Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/40964/info The Gallery XML Joomla! component is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the...

K9 Kreativity Design SQL Injection

========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By NewbieCampuz + Published: 2010-06-02 Pukul 21.00 WIB +...

Joomla! Component com_sar_news - 'id' SQL Injection

source: https://www.securityfocus.com/bid/40501/info The 'comsarnews' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component com_quran - SQL Injection

! ===========================================================================! Joomla comquran SQL Injection vulnerability Author : r3m1ck [email protected] Homepage : http://www.indonesiancoder.com , http://r3m1ck.us Date : 31 May, 2010 location : Indonesia Software download :...

BackLinkSpider 1.3.1774 - cat_id SQL Injection

BackLinkSpider 1.3.1774 - catid SQL Injection source: https://www.securityfocus.com/bid/40398/info BackLinkSpider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

Microsoft Publisher 2007 conversion library code execution (MS07-037; CVE-2007-1754)

Microsoft Publisher is an application that allows users to design, layout and format documents destined to be published in print, on the web, and other formats. Microsoft Publisher 2007 is included with Microsoft Office 2007, while other versions of the application are installed separately. The...

Joomla! Component Komento 1.0.0 - 'sid' SQL Injection

------------------------------------------------------------------------- Joomla Component comkonsultasi sid SQL Injection Vulnerability ------------------------------------------------------------------------- Author : c4uR Date : May, 13, 2010 Location : Jakarta, Indonesia Time Zone : GMT +7:00...

IBM Lotus Notes Buffer Overflow Vulnerability - Windows

IBM Lotus Notes is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zabbix <= 1.8.1 SQLi Vulnerability

Zabbix is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Apple iTunes PLS File Parsing Buffer Overflow (CVE-2009-2817)

Apple iTunes is a multimedia player that supports a wide range of media formats. One of the file formats supported by Apple iTunes is the PLS file format. PLS is a computer file format that stores multimedia playlists. A buffer overflow vulnerability has been reported in Apple iTunes. The error i...

Your Articles Directory - Login Option SQL Injection

source: https://www.securityfocus.com/bid/39796/info Article Directory Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...

Joomla! Component com_jdrugstopics - SQL Injection

Joomla! Component comjdrugstopics - SQL Injection Title: Joomla Component comjdrugstopics SQL Injection Vulnerability Author: SadHaCkEr Data : 2010-04-12 InformatioN AUTHOR: SadHaCkEr Email: [email protected] ANY ONE IF U lucky U will Find Me Website: http://www.sadx.297m.com/ Forum :...

Zabbix < 1.8.2 SQLi Vulnerability

Zabbix is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Joomla! Component com_jdrugstopics - SQL Injection

Title: Joomla Component comjdrugstopics SQL Injection Vulnerability Author: SadHaCkEr Data : 2010-04-12 InformatioN AUTHOR: SadHaCkEr Email: [email protected] ANY ONE IF U lucky U will Find Me Website: http://www.sadx.297m.com/ Forum : http://v4-team.net/cc ExploiT Vulnerable :...

Moodle < 1.8.12 / 1.9.x < 1.9.8 Multiple Vulnerabilities

Binary data 5504.prm...

DEBIAN-CVE-2010-1189

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."...

Joomla! Component com_aml_2 - 'art' SQL Injection

source: https://www.securityfocus.com/bid/38914/info The 'comaml2' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

4x CMS - 'login.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/39840/info 4xcms is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modi...

Debian Security Advisory DSA 2008-1 (typo3-src)

The remote host is missing an update to typo3-src announced via advisory DSA 2008-1. OpenVAS Vulnerability Test $Id: deb20081.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2008-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...