Rapid-Source Rapid-Recipe Component - Multiple SQL Injections

source: https://www.securityfocus.com/bid/27724/info Rapid-Recipe is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

Joomla! / Mambo Component com_comments 0.5.8.5g - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27731/info The Joomla! and Mambo 'comcomments' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

S9Y Serendipity Freetag-plugin 2.95 - style Cross-Site Scripting

S9Y Serendipity Freetag-plugin 2.95 - style Cross-Site Scripting source: https://www.securityfocus.com/bid/27697/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an...

Joomla! Mambo Component com_sermon 0.2 - gid SQL Injection

Joomla! Mambo Component comsermon 0.2 - gid SQL Injection source: https://www.securityfocus.com/bid/27673/info The Joomla! and Mambo 'comsermon' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! / Mambo Component com_sermon 0.2 - 'gid' SQL Injection

source: https://www.securityfocus.com/bid/27673/info The Joomla! and Mambo 'comsermon' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Titan FTP Server 6.05 build 550 - DELE Remote Buffer Overflow (PoC)

Titan FTP Server 6.05 build 550 - DELE Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/27611/info Titan FTP Server is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently size...

Codice CMS - login.php SQL Injection

Codice CMS - login.php SQL Injection source: https://www.securityfocus.com/bid/27592/info Codice CMS is prone to an SQL-injection vulnerability because it fails to adequately sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify...

Portail Web PHP 2.5.1 - login.php Remote File Inclusion

Portail Web PHP 2.5.1 - login.php Remote File Inclusion source: https://www.securityfocus.com/bid/27616/info Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

Portail Web PHP 2.5.1 - 'item.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/27616/info Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Codice CMS - 'login.php' SQL Injection

source: https://www.securityfocus.com/bid/27592/info Codice CMS is prone to an SQL-injection vulnerability because it fails to adequately sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities...

WordPress Plugin ShiftThis NewsLetter - SQL Injection

WordPress Plugin ShiftThis NewsLetter - SQL Injection source: https://www.securityfocus.com/bid/27586/info The ShiftThis Newsletter plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Archimede Net 2000 - E-Guest_show.php SQL Injection

Archimede Net 2000 - E-Guestshow.php SQL Injection source: https://www.securityfocus.com/bid/27563/info Archimede Net 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Joomla! Mambo Component com_buslicense - aid SQL Injection

Joomla! Mambo Component combuslicense - aid SQL Injection source: https://www.securityfocus.com/bid/27508/info The 'combuslicense' component for Mambo/Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

YeSiL KoRiDoR Ziyaretçi Defteri - index.php SQL Injection

YeSiL KoRiDoR Ziyaretçi Defteri - index.php SQL Injection source: https://www.securityfocus.com/bid/27518/info YeSiL KoRiDoR Ziyaretçi Defteri is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

YeSiL KoRiDoR Ziyaretçi Defteri - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/27518/info YeSiL KoRiDoR Ziyaretçi Defteri is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

ASPired2Protect Login Page - SQL Injection

ASPired2Protect Login Page - SQL Injection source: https://www.securityfocus.com/bid/27474/info ASPired2Protect is prone to an SQL-injection vulnerability because it fails to adequately sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access o...

Toshiba Surveillance Surveillix DVR MeIpCamX.dll 1.0 - ActiveX Control Buffer Overflow

Toshiba Surveillance Surveillix DVR MeIpCamX.dll 1.0 - ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/27360/info Surveillix DVR 'MeIpCamX.DLL' ActiveX control is prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary...

Debian: Security Advisory (DSA-1317-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Clever Copy 3.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27335/info Clever Copy is prone to multiple input-validation vulnerabilities, including two SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacke...

Xine-Lib 1.1.9 - rmff_dump_cont() Remote Heap Buffer Overflow (PoC)

Xine-Lib 1.1.9 - rmffdumpcont Remote Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/27198/info The xine-lib library is prone to a remote heap-based buffer-overflow vulnerability. This issue occurs because the software fails to perform adequate boundary checks on user-supplied...