Searching union software vulnerabilities

DeluxeBB 1.07 and earlier allows remote attacke

DeluxeBB |

DeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms via the login variable and certain other variables, by using lowercase "union select" or possibly other statements that do not match the uppercase "UNION SELECT."


Incomplete blacklist vulnerability in Kailash N

vulnerability | boastMachine | Incomplete | blacklist | Kailash | Nadh |

Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, "UNION," and "SELECT," which are not filtered by the product, which only checks for "insert," "delete," "update," and "replace."


Incomplete blacklist vulnerability in mainfile.

vulnerability | mainfilephp | Incomplete | injection | attackers | blacklist | PHP-Nuke | conduct | attacks | earlier | allows | remote | via | SQL |

Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL injection attacks via (1) "/**/UNION " or (2) " UNION/**/" sequences, which are not rejected by the protection mechanism, as demonstrated by a SQL injection via the eid parameter in a search action in the Encyclopedia module in modules.php.


Software vulnerabilities results 1 to 4 of 4     
Page: 1