Bedeng PSP 1.1 - baca.php?ckode SQL Injection

Bedeng PSP 1.1 - baca.php?ckode SQL Injection source: https://www.securityfocus.com/bid/15583/info Bedeng PSP is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Enterprise Heart Enterprise Connector 1.0.2 - send.php?messageid SQL Injection

Enterprise Heart Enterprise Connector 1.0.2 - send.php?messageid SQL Injection source: https://www.securityfocus.com/bid/15578/info Enterprise Connector is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before...

Top Music Module 3.0 - SQL Injection

Top Music Module 3.0 - SQL Injection source: https://www.securityfocus.com/bid/15581/info Top Music Module for PHP-Nuke is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Top Music Module 3.0 - SQL Injection

source: https://www.securityfocus.com/bid/15581/info Top Music Module for PHP-Nuke is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

phpWordPress 3.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15582/info PHPWordPress is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise...

Enterprise Heart Enterprise Connector 1.0.2 - 'messages.php?messageid' SQL Injection

source: https://www.securityfocus.com/bid/15578/info Enterprise Connector is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise ...

FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15601/info FreeWebStat is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...

Orca Forum 4.3 - forum.php SQL Injection

Orca Forum 4.3 - forum.php SQL Injection source: https://www.securityfocus.com/bid/15565/info Orca Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Comdev Vote Caster 3.1 - index.php SQL Injection

Comdev Vote Caster 3.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/15563/info Comdev Vote Caster is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successf...

WSN Forum 1.21 - 'memberlist.php' SQL Injection

source: https://www.securityfocus.com/bid/15549/info WSN Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

PHPPost 1.0 - 'mail.php?user' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15524/info PHP-Post is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Advanced Poll 2.0.2/2.0.3 - 'popup.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15506/info Advanced Poll is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the...

Widget Property 1.1.19 - 'Property.php' SQL Injection

source: https://www.securityfocus.com/bid/15701/info Widget Press Widget Property is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'property.php' script before using it in an SQL query. This vulnerability...

JPortal Web Portal 2.2.1/2.3.1 - 'comment.php' SQL Injection

source: https://www.securityfocus.com/bid/15324/info JPortal is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being used in an SQL query. Successful exploitation could result in a compromise of the application,...

Moodle SQL injection flaws

The remote host is running a version of the Moodle suite, an open-source course management system written in PHP, which is older than version 1.4.3. The remote version of this software is vulnerable to SQL injection issue in 'glossary' module due to a lack of user input sanitization. OpenVAS...

i-mall.cgi

The script i-mall.cgi is installed. Some versions of this script are vulnerable to remote command exacution flaw, due to insuficient user input sanitization. A malicious user can pass arbitrary shell commands on the remote server through this script. OpenVAS Vulnerability Test $Id: i-mallcgi.nasl...

Galerie 2.4 - 'showgallery.php' SQL Injection

source: https://www.securityfocus.com/bid/15313/info Galerie is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Outlook Web Access URL Injection

Due to a lack of sanitization of the user input, the remote version of Microsoft Outlook Web Access 2003 is vulnerable to URL injection which can be exploited to redirect a user to a different, unauthorized web server after authenticating to OWA. SPDX-FileCopyrightText: 2005 Michael J. Richardson...

Elite Forum 1.0 - HTML Injection

Elite Forum 1.0 - HTML Injection source: https://www.securityfocus.com/bid/15257/info Elite Forum is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

Belchior Foundry vCard Pro 3.1 - 'Addrbook.php' SQL Injection

source: https://www.securityfocus.com/bid/15254/info vCard PRO is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...