Joomla! Component com_horses - id SQL Injection

Joomla! Component comhorses - id SQL Injection source: https://www.securityfocus.com/bid/40308/info The 'comhorses' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

NPDS REvolution 10.02 - 'download.php' SQL Injection

source: https://www.securityfocus.com/bid/40156/info NPDS Revolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

NPDS REvolution 10.02 - download.php SQL Injection

NPDS REvolution 10.02 - download.php SQL Injection source: https://www.securityfocus.com/bid/40156/info NPDS Revolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

SA-CONTRIB-2010-044: Bibliography - Cross Site Scripting

The Bibliography module enables users to manage and display lists of scholarly publications. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. This is mitigated by the fact that only users with the 'administer...

Affiliate Store Builder - edit_cms.php Multiple SQL Injections

Affiliate Store Builder - editcms.php Multiple SQL Injections source: https://www.securityfocus.com/bid/40058/info Affiliate Store Builder is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

EasyPublish CMS 23.04.2010 - URI Cross-Site Scripting

EasyPublish CMS 23.04.2010 - URI Cross-Site Scripting source: https://www.securityfocus.com/bid/40037/info EasyPublish CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

eFront 3.x - 'ask_chat.php' SQL Injection

source: https://www.securityfocus.com/bid/40032/info eFront is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

Web 2.0 Social Network Freunde Community System - user.php SQL Injection

Web 2.0 Social Network Freunde Community System - user.php SQL Injection source: https://www.securityfocus.com/bid/40264/info Web 2.0 Social Network Freunde Community System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in ...

DeluxeBB 1.x - 'newpost.php' SQL Injection

source: https://www.securityfocus.com/bid/39962/info DeluxeBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

Digital Factory Publique! 2.3 - sid SQL Injection

Digital Factory Publique! 2.3 - sid SQL Injection source: https://www.securityfocus.com/bid/39988/info Publique! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

VMware View 3.1.x - URL Processing Cross-Site Scripting

source: https://www.securityfocus.com/bid/39949/info VMware View is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Your Articles Directory - Login Option SQL Injection

Your Articles Directory - Login Option SQL Injection source: https://www.securityfocus.com/bid/39796/info Article Directory Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Tele Datas Contact Management Server 0.9 - Username SQL Injection

Tele Datas Contact Management Server 0.9 - Username SQL Injection source: https://www.securityfocus.com/bid/39799/info The Tele Data's Contact Management Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

SmartBlog 1.3 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/39756/info SmartBlog is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

SmartBlog 1.3 - SQL Injection Cross-Site Scripting

SmartBlog 1.3 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/39756/info SmartBlog is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities coul...

Serenity Audio Player 3.2.3 - '.m3u' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/39768/info Serenity Audio Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed...

Serenity Audio Player 3.2.3 - '.m3u' Remote Buffer Overflow (Metasploit)

source: https://www.securityfocus.com/bid/39768/info Serenity Audio Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed...

PowerEasy 2006 - ComeUrl Cross-Site Scripting

PowerEasy 2006 - ComeUrl Cross-Site Scripting source: https://www.securityfocus.com/bid/39696/info PowerEasy is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

PowerEasy 2006 - 'ComeUrl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39696/info PowerEasy is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

FlashCard 2.6.5 - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39648/info FlashCard is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...