AbleSpace 1.0 - 'adv_cat.php' SQL Injection

source: https://www.securityfocus.com/bid/29369/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

Excuse Online - 'pwd.asp' SQL Injection

source: https://www.securityfocus.com/bid/29370/info Excuse Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Campus Bulletin Board 3.4 - '/post3/view.asp?id' SQL Injection

source: https://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

PHPFix 2.0 - '/auth/00_pass.php?account' SQL Injection

source: https://www.securityfocus.com/bid/29371/info phpFix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

ClassSystem 2.0/2.3 - 'HomepageTop.php?teacher_id' SQL Injection

source: https://www.securityfocus.com/bid/29372/info ClassSystem is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. These issues include multiple SQL-injection vulnerabilities and an arbitrary-file-upload vulnerability. Exploiting...

WordPress Plugin Upload File - wp-uploadfile.php SQL Injection

WordPress Plugin Upload File - wp-uploadfile.php SQL Injection source: https://www.securityfocus.com/bid/29352/info The Upload File plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

BMForum 5.6 - bsd01header.php Cross-Site Scripting

BMForum 5.6 - bsd01header.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

PHPFreeForum 1.0 rc2 - error.php?message Cross-Site Scripting

PHPFreeForum 1.0 rc2 - error.php?message Cross-Site Scripting source: https://www.securityfocus.com/bid/29337/info phpFreeForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

BMForum 5.6 - bsd01footer.php Cross-Site Scripting

BMForum 5.6 - bsd01footer.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

PHPFreeForum 1.0 rc2 - partmenu.php Multiple Cross-Site Scripting Vulnerabilities

PHPFreeForum 1.0 rc2 - partmenu.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29337/info phpFreeForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage thes...

BMForum 5.6 - index.php Cross-Site Scripting

BMForum 5.6 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code ...

BMForum 5.6 - 'bsd01footer.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

BMForum 5.6 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

BMForum 5.6 - 'bsd01header.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

PHPFreeForum 1.0 rc2 - 'error.php?message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29337/info phpFreeForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

libxslt XSL 1.1.23 - File Processing Buffer Overflow

libxslt XSL 1.1.23 - File Processing Buffer Overflow source: https://www.securityfocus.com/bid/29312/info The 'libxslt' library is prone to a buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker may exploit this issue to...

libxslt XSL 1.1.23 - File Processing Buffer Overflow

source: https://www.securityfocus.com/bid/29312/info The 'libxslt' library is prone to a buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker may exploit this issue to execute arbitrary code with the privileges of the user...

Site Tanitimlari Scripti - Multiple SQL Injections

Site Tanitimlari Scripti - Multiple SQL Injections source: https://www.securityfocus.com/bid/29299/info Site Tanitimlari Scripti is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues...

DizaynPlus Nobetci Eczane Takip 1.0 - ayrinti.asp SQL Injection

DizaynPlus Nobetci Eczane Takip 1.0 - ayrinti.asp SQL Injection source: https://www.securityfocus.com/bid/29300/info DizaynPlus Nobetci Eczane Takip is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

PHP-Nuke KuiraniKerim Module - sid SQL Injection

PHP-Nuke KuiraniKerim Module - sid SQL Injection source: https://www.securityfocus.com/bid/29261/info The 'KuiraniKerim' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this iss...