Vendor Dictionary: PHP Labware

PHP Labware

Short Name:	[None Entered]
Previous Names:	[None Entered]
URL:	[None Entered]
Email:	[None Entered]
Security URL:	[None Entered]
Security Email:	[None Entered]
Knowledge Base:	[None Entered]
Notes:	[No Notes]

Vulnerabilities by Vendor Product

PHP Labware

PHP Labware

LabStoRe: 1.5.4; OSVDB ID: 83322 LabStoRe index_short.php where_clause Parameter SQL Injection; 1.5.4; OSVDB ID: 83323 LabStoRe index.php where_clause Parameter SQL Injection; 1.5.4; OSVDB ID: 83324 LabStoRe index_long.php where_clause Parameter SQL Injection

OrderSys: 1.6.3; OSVDB ID: 83325 OrderSys index_short.php where_clause Parameter SQL Injection; 1.6.3; OSVDB ID: 83326 OrderSys index.php where_clause Parameter SQL Injection; 1.6.3; OSVDB ID: 83327 OrderSys index_long.php where_clause Parameter SQL Injection; 1.6.4; OSVDB ID: 84810 OrderSys ordering/vendors.php smenu_1 Parameter SQL Injection; 1.6.4; 1.6.4; OSVDB ID: 84811 OrderSys ordering/items.php smenu_1 Parameter SQL Injection; 1.6.4; OSVDB ID: 84812 OrderSys ordering/interface_creator/login.php Multiple Parameter XSS; 1.6.4; OSVDB ID: 84813 OrderSys ordering/orders.php URI XSS; 1.6.4; OSVDB ID: 84814 OrderSys ordering/vendors.php URI XSS; 1.6.4; OSVDB ID: 84815 OrderSys ordering/items.php Multiple Parameter XSS; 1.6.4; OSVDB ID: 84816 OrderSys ordering/interface_creator/index_long.php Multiple Parameter XSS; 1.6.4; OSVDB ID: 84817 OrderSys ordering/interface_creator/index_short.php Multiple Parameter XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.