CVE-2008-5954

SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lname parameter in a login action to an unspecified component. NOTE: the provenance of this information is unknown; the...

CVE-2008-5954

creationtimestamp| type| source ---|---|--- 2008-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7305...

CVE-2007-5954

Cross-site scripting XSS vulnerability in buscador.php in JLMForo System allows remote attackers to inject arbitrary web script or HTML via the clave parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5954

CVE-2007-5954 describes a cross-site scripting (XSS) in JLMForo System via the buscador.php script, exploitable through the clave parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Affected component: buscador.php ; root cause: unsafe handling of user inp...

Sql injection

SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL commands via the NewsID parameter. NOTE: this issue might be the same as CVE-2006-5954...

CVE-2006-5954

SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsID parameter...

CVE-2006-5954

The provided data confirm a SQL injection vulnerability in NetVIOS 2.0 and earlier described as allowed via the NewsID parameter in page.asp. This affects the NewsID handling in News/page.asp, enabling remote attackers to inject arbitrary SQL commands. The vulnerability is reflected in multiple s...