Search | WebPortal | Contact Us
Recent News
Languages


Search
You can use the form below to search our site. Just enter the keywords to search.










Results 41 - 45 of 58 Page 9 of 12
back 1 2 3 4 5 6 7 8 9 10 11 12 - Next Results per-page: 5 | 10 | 20 | 50

Title Autorank PHP SQL Injection Vulnerability
Info Autorank PHP is a widely used topsite script offered by JMB Software. It is vulnerable to SQL Injection attacks in the "accounts.php" file. These vulnerabilities can be exploited by a malicious user via the lost password form, account edit form, or the registration form. The vulnerabilities leave user accounts open to compromise as well as the entire database that is being used for a particular top site.
Date December 18, 2021
BID 9251  
Credit James Bercegay


Title osCommerce Malformed Session ID XSS Vulnerability
Info osCommerce is a very powerful open source e-commerce solution. It has been found however to be vulnerable to an XSS vuln due to the session id parameter not being properly sanitized. This seems to take place only over a secure, SSL connection, however it is believed to affect even regular http connections in the current CVS version. In some cases (namely the CVS version) the full path of the web directory may also be exposed when exploiting this vulnerability.
Date December 17, 2021
BID 9238  
Credit James Bercegay


Title Multiple Vulnerabilities In Aardvark Topsites
Info Aardvark Topsites is a very powerful, and popular Topsites Ranking web application. Versions prior to 4.1.1 are vulnerable to a number of issues though. These issues include SQL Injection, Path Disclosure, Plaintext Weaknesses, and information disclosure vulnerabilities. You can update your Aardvark Topsite at the official download site. All users should upgrade as soon as possible.
Date December 16, 2021
BID 9231  
Credit James Bercegay


Title Invision Power Board SQL Injection Vulnerability
Info Invision Power Board is one of the most popular and powerful forums available today. It is used by millions of people worldwide and businesses alike. There is however an SQL Injection vulnerability that affects ALL versions (even the non public releases). The people at Invision power were very prompt and professional in addressing the issue and there is now an available fix less than a week after I discovered the vulnerability. Details and a link to the fix are available in the report by GulfTech Security Research.
Date December 16, 2021
BID 9232  
Credit James Bercegay


Title Invision Power Top Site List SQL Injection
Info Invision Power Top Site List is a flexible site ranking script written in PHP. Featuring an impressive feature set with a user-friendly interface. However It is vulnerable to SQL injection. This flaw is hard to exploit, thus it will not be addressed until the next release of the Invision Power Top Site List. No patches or immediate upgrade will be released.
Date December 15, 2021
BID 9229  
Credit James Bercegay

back 1 2 3 4 5 6 7 8 9 10 11 12 - Next Results per-page: 5 | 10 | 20 | 50
Results 41 - 45 of 58 Page 9 of 12




Copyright 2004 GulfTech Research And Development, All Rights Reserved