Scripts4Profit DXShopCart 4.30 - pid SQL Injection

Scripts4Profit DXShopCart 4.30 - pid SQL Injection source: https://www.securityfocus.com/bid/30772/info DXShopCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

NewsHOWLER 1.03 - Cookie Data SQL Injection

NewsHOWLER 1.03 - Cookie Data SQL Injection source: https://www.securityfocus.com/bid/30732/info NewsHOWLER is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

NewsHOWLER 1.03 - Cookie Data SQL Injection

source: https://www.securityfocus.com/bid/30732/info NewsHOWLER is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

PromoProducts - 'view_product.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/30725/info PromoProducts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access...

FipsCMS 2.1 - neu.asp SQL Injection

FipsCMS 2.1 - neu.asp SQL Injection source: https://www.securityfocus.com/bid/30712/info fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Links Pile - link.php SQL Injection

Links Pile - link.php SQL Injection source: https://www.securityfocus.com/bid/29223/info Links Pile is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

PHP Realty - dpage.php SQL Injection

PHP Realty - dpage.php SQL Injection source: https://www.securityfocus.com/bid/30678/info PHP Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Meet#Web 0.8 - RegRightsResource.class.php?root_path Remote File Inclusion

MeetWeb 0.8 - RegRightsResource.class.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacke...

Meet#Web 0.8 - 'RegRightsResource.class.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Meet#Web 0.8 - 'RegForm.class.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Meet#Web 0.8 - 'ManagerRightsResource.class.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Meet#Web 0.8 - RegForm.class.php?root_path Remote File Inclusion

MeetWeb 0.8 - RegForm.class.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

Meet#Web 0.8 - ManagerRightsResource.class.php?root_path Remote File Inclusion

MeetWeb 0.8 - ManagerRightsResource.class.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...

Meet#Web 0.8 - RegResource.class.php?root_path Remote File Inclusion

MeetWeb 0.8 - RegResource.class.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

Meet#Web 0.8 - 'ManagerResource.class.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Meet#Web 0.8 - 'RegResource.class.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Meet#Web 0.8 - ManagerResource.class.php?root_path Remote File Inclusion

MeetWeb 0.8 - ManagerResource.class.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker ...

PHP-Fusion 4.01 - readmore.php SQL Injection

PHP-Fusion 4.01 - readmore.php SQL Injection source: https://www.securityfocus.com/bid/30680/info PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Linkspider 1.08 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/30632/info Linkspider is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and the underlying system; other attac...

DD-WRT - Site Survey SSID Script Injection

source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue to execute arbitrary script code i...