Joomla! Component com_hospital - SQL Injection

Joomla! Component comhospital - SQL Injection source: https://www.securityfocus.com/bid/48689/info The 'comhospital' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

AJ Classifieds - listingid SQL Injection

AJ Classifieds - listingid SQL Injection source: https://www.securityfocus.com/bid/48702/info AJ Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Sphider 1.3.x - Admin Panel Multiple SQL Injections

source: https://www.securityfocus.com/bid/48647/info Sphider is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Gilnet News - 'read_more.php' SQL Injection

source: https://www.securityfocus.com/bid/48966/info Gilnet News is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Joomla! Component com_voj - SQL Injection

source: https://www.securityfocus.com/bid/48621/info The 'comvoj' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component com_voj - SQL Injection

Joomla! Component comvoj - SQL Injection source: https://www.securityfocus.com/bid/48621/info The 'comvoj' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...

Classified Script - c-BrowseClassified Cross-Site Scripting

source: https://www.securityfocus.com/bid/48564/info Classified Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Classified Script - c-BrowseClassified Cross-Site Scripting

Classified Script - c-BrowseClassified Cross-Site Scripting source: https://www.securityfocus.com/bid/48564/info Classified Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrar...

A Really Simple Chat Multiple XSS Vulnerabilities

A Really Simple Chat is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

iMesh 10.0 - IMWebControl.dll ActiveX Control Buffer Overflow

iMesh 10.0 - IMWebControl.dll ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/48550/info iMesh is prone to a buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting this issue allows...

Joomla! Component com_morfeoshow - 'idm' SQL Injection

source: https://www.securityfocus.com/bid/48452/info The 'commorfeoshow' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

WordPress Plugin Pretty Link Lite 1.4.56 - Multiple SQL Injections

WordPress Plugin Pretty Link Lite 1.4.56 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48469/info The 'Pretty Link Lite' plugin for WordPress is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an...

Joomla! Component com_morfeoshow - idm SQL Injection

Joomla! Component commorfeoshow - idm SQL Injection source: https://www.securityfocus.com/bid/48452/info The 'commorfeoshow' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...

EA Sports Cross Site Scripting

Information -------------------- Name : XSS Persistent in EA Sports Software : EA Sports Main site Vendor Homepage : http://www.ea.com Vulnerability Type : XSS Persistent Severity : Very High Researcher : Juan Sacco Description ------------------ EA Sports is prone to a XSS Stored vulnerability...

iGiveTest 2.1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications iGiveTest 2.1.0 SQL Injection Vulnerability Brendan Coles 2011-03-20 Summary : There is an SQL Injection vulnerability in iGiveTest 2.1.0 which may allow an attacker to take control of the software. Software : Software Link: iGiveTest...

Taha Portal 3.2 - 'sitemap.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48342/info Taha Portal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Taha Portal 3.2 - sitemap.php Cross-Site Scripting

Taha Portal 3.2 - sitemap.php Cross-Site Scripting source: https://www.securityfocus.com/bid/48342/info Taha Portal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code i...

Silex 'sitemap.php' Cross Site Scripting Vulnerability

Silex is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to stea...

WordPress Plugin GD Star Rating - votes SQL Injection

WordPress Plugin GD Star Rating - votes SQL Injection source: https://www.securityfocus.com/bid/48166/info The GD Star Rating plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...

The Pacer Edition CMS 2.1 - 'email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48215/info The Pacer Edition CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...