Ultimate PHP Board 1.8/1.9 - 'viewforum.php' SQL Injection

source: https://www.securityfocus.com/bid/13622/info Ultimate PHP Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of t...

Open Solution Quick.Cart 0.3 - index.php Cross-Site Scripting

Open Solution Quick.Cart 0.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13599/info Quick.Cart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

ASP Inline Corporate Calendar 3.6.3 - Details.asp SQL Injection

ASP Inline Corporate Calendar 3.6.3 - Details.asp SQL Injection source: https://www.securityfocus.com/bid/13487/info ASP Inline Corporate Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it...

FishCart 3.1 - 'upstracking.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13499/info FishCart is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit of the SQL-injection issues could allow an attacker to compromise...

WebCrossing WebX 5.0 - Cross-Site Scripting

WebCrossing WebX 5.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/13482/info WebCrossing is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CodetoSell ViArt Shop Enterprise 2.1.6 - reviews.php Multiple Cross-Site Scripting Vulnerabilities

CodetoSell ViArt Shop Enterprise 2.1.6 - reviews.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13462/info ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application ...

Maxwebportal 1.3 - 'dl_popular.asp' SQL Injection

source: https://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in...

phpCOIN 1.2 - login.php?PHPcoinsessid SQL Injection

phpCOIN 1.2 - login.php?PHPcoinsessid SQL Injection source: https://www.securityfocus.com/bid/13433/info PHPCoin is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

Just Williams Amazon Webstore - HTTP Response Splitting

Just Williams Amazon Webstore - HTTP Response Splitting source: https://www.securityfocus.com/bid/13428/info Amazon Webstore is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may explo...

phpBB Notes Module - SQL Injection

source: https://www.securityfocus.com/bid/13417/info The notes module for phpBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

MetaCart2 - strSubCatalog_NAME SQL Injection

MetaCart2 - strSubCatalogNAME SQL Injection source: https://www.securityfocus.com/bid/13385/info A remote SQL injection vulnerability affects MetaCart2. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may...

MetaCart2 - SearchAction.asp Multiple SQL Injections

MetaCart2 - SearchAction.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/13393/info MetaCart2 is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. An...

MetaCart E-Shop V-8 - IntProdID SQL Injection

MetaCart E-Shop V-8 - IntProdID SQL Injection source: https://www.securityfocus.com/bid/13376/info An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attack...

MetaCart E-Shop V-8 - StrCatalog_NAME SQL Injection

MetaCart E-Shop V-8 - StrCatalogNAME SQL Injection source: https://www.securityfocus.com/bid/13377/info An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An...

GrayCMS 1.1 - error.php Remote File Inclusion

GrayCMS 1.1 - error.php Remote File Inclusion source: https://www.securityfocus.com/bid/13381/info GrayCMS is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

GrayCMS 1.1 - 'error.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/13381/info GrayCMS is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected...

MetaCart2 - 'strSubCatalog_NAME' SQL Injection

source: https://www.securityfocus.com/bid/13385/info A remote SQL injection vulnerability affects MetaCart2. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may exploit this issue to manipulate SQL querie...

MetaCart2 - 'IntCatalogID' SQL Injection

source: https://www.securityfocus.com/bid/13382/info A remote SQL-injection vulnerability affects MetaCart2 because the application fails to properly sanitize user-supplied input before including it in SQL queries. An attacker may exploit this issue to manipulate SQL queries to the underlying...

StorePortal 2.63 - default.asp Multiple SQL Injections

StorePortal 2.63 - default.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/13358/info StorePortal is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

CartWIZ 1.10 - TellAFriend.asp Cross-Site Scripting

CartWIZ 1.10 - TellAFriend.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/13336/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...