MOTIONBORG Web Real Estate 2.1 - SQL Injection

Title : MOTIONBORG Web Real Estate $1,475.00 ajann SQL Injector Beta= Script Tables & Columns -dtproperties- id objectid property value uvalue lvalue version -Events- EventId EventDay EventStartDate EventEndDate EventName EventDesc EventIngUrl EventStatus -MailingList- RecordID FullName Phone Ema...

Magic Photo Storage Website - '/user/couple_milestone.php?_config[site_path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...

Magic Photo Storage Website - '/user/change_catalog_template.php?_config[site_path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...

Magic Photo Storage Website - '/user/user_email.php?_config[site_path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...

CreateAuction - 'Cats.asp' SQL Injection

source: https://www.securityfocus.com/bid/21929/info Createauction is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Coppermine Photo Gallery 1.4.10 - xpl.php SQL Injection

Coppermine Photo Gallery 1.4.10 - xpl.php SQL Injection !/usr/bin/php "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print "\n---------------------------------------------------------\n"; exit1; // 0 = xpl.php 1 = http://localhost/cpg1410/ 2 = roo...

EasyNews PRO News Publishing 4.0 - Password Disclosure

= EasyNews PRO News Publishing 4.0 Remote Password Disclosure Vulnerability Affected Software: Easy News 4.0 PRO = Risk: Critical = Download: http://www.stphp.com/scripts/EasyNewsPRO40.zip = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greets: str0ke, crashovernight, TheJT, Kacper Usage:...

Enthrallweb eNews 1.0 - Remote User Pass Change

Enthrallweb eNews 1.0 - Remote User Pass Change User Id: PASSWORD: FIRST: LAST:...

Work System eCommerce 3.0.3/3.0.4 - 'forum.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/21580/info WORK system e-commerce is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

AnnonceScriptHP 2.0 - email.php?id SQL Injection

AnnonceScriptHP 2.0 - email.php?id SQL Injection source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

Messageriescripthp 2.0 - lire-avis.php?aa SQL Injection

Messageriescripthp 2.0 - lire-avis.php?aa SQL Injection source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied...

Messageriescripthp 2.0 - existepseudo.php?pseudo Cross-Site Scripting

Messageriescripthp 2.0 - existepseudo.php?pseudo Cross-Site Scripting source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

Messageriescripthp 2.0 - 'lire-avis.php?aa' SQL Injection

source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Click Gallery - Multiple Input Validation Vulnerabilities

Click Gallery - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/21311/info Click Gallery is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently saniti...

Seditio 1.10 - Users.Profile.Inc.php SQL Injection

Seditio 1.10 - Users.Profile.Inc.php SQL Injection source: https://www.securityfocus.com/bid/21232/info Seditio is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Gnews Publisher - Multiple SQL Injections

Gnews Publisher - Multiple SQL Injections source: https://www.securityfocus.com/bid/21194/info Gnews Publisher is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Klf-Realty 2.0 - 'search_listing.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21199/info Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Klf-Realty 2.0 - 'detail.asp?property_id' SQL Injection

source: https://www.securityfocus.com/bid/21199/info Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

A-Cart Pro 2.0 - 'product.asp?ProductID' SQL Injection

source: https://www.securityfocus.com/bid/21166/info A-Cart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

ASPCart 4.5 - Multiple SQL Injections

ASPCart 4.5 - Multiple SQL Injections source: https://www.securityfocus.com/bid/21152/info ASPCart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...