65 matches found
CVE-2008-4804
The CVE-2008-4804 entry describes an SQL injection in the Gallery module 1.3 for PHP-Nuke, allowing remote attackers to execute arbitrary SQL via the aid parameter in showalbum (index.php). Affected component: Gallery module 1.3 for PHP-Nuke; root cause: unsanitized input in the showalbum action ...
CVE-2007-4804
AuraCMS 1.5rc is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands through the id parameter in hal.php, cetak.php, lihat.php, pesan.php, and teman.php. In some cases the scripts are reachable via requests to the product’s top-level UR...
CVE-2005-4804
Technical details about CVE-2005-4804 are not publicly available in the provided documents. Monitor for updates.