Noticia Portal - 'detalle_noticia.php' SQL Injection

source: https://www.securityfocus.com/bid/29655/info Noticia Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

Hot Links SQL-PHP - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29632/info Hot Links SQL-PHP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

SchoolCenter 7.5 - Multiple Cross-Site Scripting Vulnerabilities

SchoolCenter 7.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29591/info SchoolCenter is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execu...

SchoolCenter 7.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29591/info SchoolCenter is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Joomla! / Mambo Component Joo!BB 0.5.9 - 'forum' SQL Injection

source: https://www.securityfocus.com/bid/29475/info The Joo!BB component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

i-pos StoreFront 1.3 - index.asp SQL Injection

i-pos StoreFront 1.3 - index.asp SQL Injection source: https://www.securityfocus.com/bid/29471/info i-pos Storefront is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

i-pos StoreFront 1.3 - 'index.asp' SQL Injection

source: https://www.securityfocus.com/bid/29471/info i-pos Storefront is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

TorrentTrader Classic 1.x - scrape.php SQL Injection

TorrentTrader Classic 1.x - scrape.php SQL Injection source: https://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

JustPORTAL 1.0 - 'site' Multiple SQL Injections

source: https://www.securityfocus.com/bid/29426/info JustPORTAL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Joomla! Mambo Component Artists - idgalery SQL Injection

Joomla! Mambo Component Artists - idgalery SQL Injection source: https://www.securityfocus.com/bid/29407/info The Artists component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Excuse Online - pwd.asp SQL Injection

Excuse Online - pwd.asp SQL Injection source: https://www.securityfocus.com/bid/29370/info Excuse Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

PHPFix 2.0 - auth00_pass.php?account SQL Injection

PHPFix 2.0 - auth00pass.php?account SQL Injection source: https://www.securityfocus.com/bid/29371/info phpFix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

PHPFix 2.0 - '/auth/00_pass.php?account' SQL Injection

source: https://www.securityfocus.com/bid/29371/info phpFix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

PHPFix 2.0 - fixbrowse.php?kind SQL Injection

PHPFix 2.0 - fixbrowse.php?kind SQL Injection source: https://www.securityfocus.com/bid/29371/info phpFix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacke...

ClassSystem 2.0/2.3 - 'HomepageTop.php?teacher_id' SQL Injection

source: https://www.securityfocus.com/bid/29372/info ClassSystem is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. These issues include multiple SQL-injection vulnerabilities and an arbitrary-file-upload vulnerability. Exploiting...

Excuse Online - 'pwd.asp' SQL Injection

source: https://www.securityfocus.com/bid/29370/info Excuse Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Campus Bulletin Board 3.4 - '/post3/view.asp?id' SQL Injection

source: https://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

Campus Bulletin Board 3.4 - post3view.asp?id SQL Injection

Campus Bulletin Board 3.4 - post3view.asp?id SQL Injection source: https://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently...

AbleSpace 1.0 - 'adv_cat.php' SQL Injection

source: https://www.securityfocus.com/bid/29369/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

WordPress Plugin Upload File - wp-uploadfile.php SQL Injection

WordPress Plugin Upload File - wp-uploadfile.php SQL Injection source: https://www.securityfocus.com/bid/29352/info The Upload File plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...