CVE-2008-3682

CVE-2008-3682 describes an SQL injection vulnerability in dpage.php of YPN PHP Realty. The underlying issue is unsafely handling the docID parameter, enabling remote attackers to execute arbitrary SQL commands. Documents consistently state: an injection via docID could impact the application, wit...

CVE-2008-3682

creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32241...

CVE-2007-3682

SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3682

OpenLD 1.2.2 and earlier are affected by a SQL injection in index.php via the id parameter, enabling remote attackers to execute arbitrary SQL commands. The issue is explicitly described in CVE-2007-3682 with base metrics indicating high severity (CVSSv2 Base Score 7.5, Impact: Partial confidenti...

CVE-2006-3682

awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the 1 year, 2 pluginmode or 3 month parameters...

CVE-2006-3682

AWStats prior to 6.5 build 1.857 is affected by a path disclosure vulnerability (CVE-2006-3682). The issue permits remote attackers to determine the installation path by supplying specific parameters (year, pluginmode, or month) to awstats.pl. Public references in SUSE and related advisories reit...

CVE-2005-3682

CVE-2005-3682 describes multiple SQL injection vulnerabilities in Wizz Forum 1.20 . Attackers can remotely exploit: (1) AuthID in ForumAuthDetails.php, (2) TopicID in ForumTopicDetails.php, and (3) TopicID/ForumReply in ForumReply.php to execute arbitrary SQL commands. The description indicates t...