CVE-2009-4712

CVE-2009-4712 describes an SQL injection in index.php of the Tukanas Classifieds (aka EasyClassifieds) Script 1.0, exploitable via the b parameter to allow remote execution of arbitrary SQL commands. Affected component is the web application’s input handling for b; root cause is improper input sa...

CVE-2009-4700

The CVE-2009-4700 entry concerns SkaDate Dating. Affected component: index.php handling the layout parameter. Root cause: directory traversal via a .. sequence in layout, enabling remote attackers to read arbitrary files. The NVD/NVD-derived records confirm this behavior and report a medium base ...

Preisschlacht 4.0 Flash System - 'index.php?aid' SQL Injection

----------------------------Information------------------------------------------------ +Name : Preisschlacht V4 Flash System SQL Injection seite&aid index.php +Autor : Easy Laster +Date : 15.03.2010 +Script : Preisschlacht V4 Flash System +Price : € 149.90 +Language :PHP +Discovered by Easy Last...

PHPpool media Domain Verkaufs und Auktions Portal - index.php SQL Injection

PHPpool media Domain Verkaufs und Auktions Portal - index.php SQL Injection ----------------------------Information------------------------------------------------ +Name : phppool media Domain Verkaufs und Auktions Portal index.php SQL Injection +Autor : Easy Laster +Date : 14.03.2010 +Script :...

Azeno CMS SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================== Azeno CMS SQL Injection Vulnerability ===================================== ExploiT Vulnerable File : http://127.0.0.1/admin/index.php?id=SQL ExploiT : -1 UNION SELECT 1,2,3,4,5,6,7 FROM dcuser Example...

systemsoftware Community Black index.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== systemsoftware Community Black index.php SQL Injection Vulnerability ====================================================================...

Mambo Component com_mambads SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Mambo Component commambads SQL Injection Vulnerability =======================================================...

Xbtit 2.0.0 - SQL Injection

Xbtit 2.0.0 - SQL Injection Title : Xbtit SQL Injection Vulnerability Author : Ctacok Homepage : http://ctacok.ru/ Vulnerable File : /index.php?page=users&order=SQL&by=ASC ExploiT :...

CVE-2009-4684

Cross-site scripting XSS vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script or HTML via the sign parameter...

Sql injection

SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the 1 order parameter in a ulist action and the 2 fid parameter in a viewforum action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the 1 txtkeywords and 2 cid parameters...

CVE-2009-4696

SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

CVE-2009-4684

Cross-site scripting XSS vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script or HTML via the sign parameter...

CVE-2009-4696

RadNICS Gold 5 contains a SQL injection in index.php via the fid parameter in the view_forum action, allowing remote attackers to execute arbitrary SQL commands. No remediation details are provided in the supplied documents.

CVE-2010-0955

SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0956

SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

Multiple SQL injection vulnerabilities in Natychmiast CMS allow remote attackers to execute arbitrary SQL commands via the idstr parameter to 1 index.php and 2 aindex.php...

CVE-2010-0956

CVE-2010-0956 affects OpenCart 1.3.2 where the vulnerable component is the application’s frontend logic in the index.php file. The vulnerability is an SQL injection via the page parameter , caused by insufficient sanitization of user input before using it in an SQL query. The impact is remote arb...

CVE-2010-0955

The CVE-2010-0955 entry refers to a SQL injection in Bild Flirt Community 2.0, specifically in index.php where the id parameter can be exploited to execute arbitrary SQL commands remotely. Affected component: Bild Flirt Community 2.0 (index.php). Root cause: unsafely concatenated id parameter in ...