106 matches found
CVE-2008-4350
The CVE-2008-4350 entry concerns vbLOGIX Tutorial Script 1.0 (and earlier) with a SQL injection in main.php. The vulnerable component is the list action that uses the cat_id parameter, enabling remote attackers to execute arbitrary SQL commands. This is caused by unsanitized input in the paramete...
CVE-2008-4350
creationtimestamp| type| source ---|---|--- 2008-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6446...
[ MDVSA-2008:008 ] - Updated kernel packages fix multiple vulnerabilities and bugs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:008 http://www.mandriva.com/security/ Package : kernel Date : January 11, 2008 Affected: Corporate 4.0 Problem Description: Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel: The CIF...
Muratsoft Haber Portal v3.6 (tr) SQL Injection Vulnerability
Muratsoft Haber Portal v3.6 tr SQL Injection Vulnerability Author : ASIANEAGLE Site : www.asianeagle.org Contact: [email protected] Link : http://www.aspindir.com/Goster/4350 Demo Portal : http://www.muratsoft.com/haber/www/ Price of Portal: 300YTL // Good money for Bad Script Exploit :...
CVE-2006-4350
The CVE-2006-4350 issue affects OneOrZero 1.6.4.1 where a flaw in index.php allows SQL injection through the id parameter. The underlying root cause is improper handling of user-supplied input in a SQL query, enabling remote commands execution. Documented impact indicates partial confidentiality,...
