Social Share - vote.php HTTP Response Splitting

Social Share - vote.php HTTP Response Splitting source: https://www.securityfocus.com/bid/45550/info Social Share is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how w...

Joomla! Component JExtensions Property Finder - 'sf_id' SQL Injection

source: https://www.securityfocus.com/bid/45333/info JExtensions Property Finder is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Joomla! Component JExtensions Property Finder - sf_id SQL Injection

Joomla! Component JExtensions Property Finder - sfid SQL Injection source: https://www.securityfocus.com/bid/45333/info JExtensions Property Finder is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

RDM Embedded Lock Manager < 9.x - 'lm_tcp' Service Buffer Overflow

source: https://www.securityfocus.com/bid/45245/info RDM Embedded is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. The issue affects the 'lmtcp' service. Successful exploits may allow an attacker to execute arbitrary code in t...

Techno Dreams Articles & Papers Package 2.0 - 'ArticlesTablelist.asp' SQL Injection

source: https://www.securityfocus.com/bid/45201/info Techno Dreams Articles & Papers Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Techno Dreams FAQ Manager Package 1.0 - 'faqlist.asp' SQL Injection

source: https://www.securityfocus.com/bid/45202/info Techno Dreams FAQ Manager Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Techno Dreams Articles Papers Package 2.0 - ArticlesTablelist.asp SQL Injection

Techno Dreams Articles Papers Package 2.0 - ArticlesTablelist.asp SQL Injection source: https://www.securityfocus.com/bid/45201/info Techno Dreams Articles & Papers Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in a...

Joomla! Component Annuaire - index.php?id SQL Injection

Joomla! Component Annuaire - index.php?id SQL Injection source: https://www.securityfocus.com/bid/45147/info The Annuaire component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

BugTracker.NET 3.4.4 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45121/info BugTracker.NET is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

Joomla! Component com_storedirectory - 'id' SQL Injection

source: https://www.securityfocus.com/bid/45094/info Joomla! Store Directory is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

BugTracker.NET 3.4.4 - SQL Injection Cross-Site Scripting

BugTracker.NET 3.4.4 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/45121/info BugTracker.NET is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these...

ZYXEL P-660R-T1 V2 - HomeCurrent_Date Cross-Site Scripting

ZYXEL P-660R-T1 V2 - HomeCurrentDate Cross-Site Scripting source: https://www.securityfocus.com/bid/45027/info ZyXEL P-660R-T1 V2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

Hot Links SQL 3.2 - report.cgi SQL Injection

Hot Links SQL 3.2 - report.cgi SQL Injection source: https://www.securityfocus.com/bid/45000/info Hot Links SQL is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

AuraCMS 1.62 - 'pdf.php' SQL Injection Vulnerability

AuraCMS 1.62 'pdf.php' SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/45003/info AuraCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Raised Eyebrow CMS - venue.php SQL Injection

Raised Eyebrow CMS - venue.php SQL Injection source: https://www.securityfocus.com/bid/44880/info Raised Eyebrow CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

Simea CMS - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/44878/info Simea CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

Raised Eyebrow CMS - 'venue.php' SQL Injection

source: https://www.securityfocus.com/bid/44880/info Raised Eyebrow CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

PHPShop 2.1 EE - name_new Cross-Site Scripting

PHPShop 2.1 EE - namenew Cross-Site Scripting source: https://www.securityfocus.com/bid/44763/info PHPShop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code i...

PHPShop 2.1 EE - 'name_new' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44763/info PHPShop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting user in the...

IBM OmniFind - 'command' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44940/info IBM OmniFind is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...