Techno Dreams (Multiple Scripts) - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15215/info Multiple Techno Dreams scripts are prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could...

Woltlab 1.1/2.x - 'Info-DB Info_db.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15214/info Info-DB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acces...

PHP-Nuke Search Module - 'modules.php' Directory Traversal

source: https://www.securityfocus.com/bid/15137/info PHPNuke Search Module is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. A remote attacker may view files that are only intended to be accessible to authenticated and authorized...

MySource 2.14 - edit_table_cell_type_wysiwyg.php?Stylesheet Cross-Site Scripting

MySource 2.14 - edittablecelltypewysiwyg.php?Stylesheet Cross-Site Scripting source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

MySource 2.14 - 'mail.php?PEAR_PATH' Remote File Inclusion

source: https://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary...

Accelerated Mortgage Manager - 'Password' SQL Injection

source: https://www.securityfocus.com/bid/15097/info Accelerated Mortgage Manager is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before passing it on to SQL queries. Successful exploitation could result in a compromise of the...

Aenovo - Passworddefault.asp?Password SQL Injection

Aenovo - Passworddefault.asp?Password SQL Injection source: https://www.securityfocus.com/bid/15036/info Aenovo, aeNovoShop and aeNovoWYSI are prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before usin...

IceWarp Web Mail 5.5.1 - calendar_d.html?createdataCX Cross-Site Scripting

IceWarp Web Mail 5.5.1 - calendard.html?createdataCX Cross-Site Scripting source: https://www.securityfocus.com/bid/14980/info IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

LucidCMS 2.0 - index.php Cross-Site Scripting

LucidCMS 2.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14951/info lucidCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

LucidCMS 2.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14951/info lucidCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

PHPMyFAQ 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14928/info PHPMyFAQ is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...

PHP Advanced Transfer Manager 1.30 - Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/14883/info PHP Advanced Transfer Manager is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Exploitation of any of these vulnerabilities could lead to a...

MX Shop 3.2 - index.php Multiple SQL Injections

MX Shop 3.2 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/14876/info MX Shop is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could all...

vBulletin 1.0.1 lite2.x3.0 - admincpusertitle.php?usertitleid SQL Injection

vBulletin 1.0.1 lite2.x3.0 - admincpusertitle.php?usertitleid SQL Injection source: https://www.securityfocus.com/bid/14872/info vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using...

AEwebworks aeDating 3.24.0 - search_result.php SQL Injection

AEwebworks aeDating 3.24.0 - searchresult.php SQL Injection source: https://www.securityfocus.com/bid/14847/info AEwebworks aeDating is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before it is used in an SQL query. Successful...

AEwebworks aeDating 3.2/4.0 - 'search_result.php' SQL Injection

source: https://www.securityfocus.com/bid/14847/info AEwebworks aeDating is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before it is used in an SQL query. Successful exploitation could result in a compromise of the application,...

DeluxeBB 1.0 - 'topic.php' SQL Injection

source: https://www.securityfocus.com/bid/14851/info DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries. Successful exploitation could result in a compromise of the application,...

Stylemotion WEBNEWS 1.4 - startup.php Cookie SQL Injection

Stylemotion WEBNEWS 1.4 - startup.php Cookie SQL Injection source: https://www.securityfocus.com/bid/14776/info WEB//NEWS is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL querie...

MAXdev MD-Pro 1.0.73 - Multiple Cross-Site Scripting Vulnerabilities

MAXdev MD-Pro 1.0.73 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14751/info MAXdev MD-Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

MyBulletinBoard 1.0 Forumdisplay.PHP Cross-Site Scripting Vulnerability

MyBulletinBoard 1.0 Forumdisplay.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/14754/info MyBulletinBoard is prone to a cross-site scripting vulnerability. This is due to a lack of proper sanitization of user-supplied input to th...