Sql injection

SQL injection vulnerability in ogpshow.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL commands via the display parameter...

CVE-2009-4935: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ogpshow.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL commands via the display parameter...

CVE-2009-2447: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ogpshow.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 search or 2 display parameter...

CVE-2000-0940: Undefined Security Weakness

Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. dot dot attack on the "name" or "display" parameter...

CVE-2000-0976: Undefined Security Weakness

Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter...

CVE-1999-0778: Undefined Security Weakness

Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter...