CVE-2007-2898

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2007-2905

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the postid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2898

The CVE-2007-2898 entry describes an SQL injection vulnerability in the 2z Project 0.9.5, specifically in the file includes/rating.php where user input from the rating parameter to index.php is unsafely handled. This leads to the possibility of remote attackers executing arbitrary SQL commands. T...

CVE-2007-2898: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2007-2905: Undefined Security Weakness

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the postid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

[waraxe-2007-SA#051] - Sql Injection in 2z Project 0.9.5

waraxe-2007-SA051 - Sql Injection in 2z Project 0.9.5 ==================================================================== Author: Janek Vind "waraxe" Date: 23. May 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-51.html Target software description: Vulnerable: 2z Project 0.9.5...

waraxe-2007-SA051.txt

waraxe-2007-SA051 - Sql Injection in 2z Project 0.9.5 ==================================================================== Author: Janek Vind "waraxe" Date: 23. May 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-51.html Target software description: Vulnerable: 2z Project 0.9.5...

2z Project 0.9.5 - 'rating.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24122/info 2z Project is prone to a cross-site scripting vulnerability. Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker m...

2z Project 0.9.5 - rating.php Cross-Site Scripting

2z Project 0.9.5 - rating.php Cross-Site Scripting source: https://www.securityfocus.com/bid/24122/info 2z Project is prone to a cross-site scripting vulnerability. Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context o...