CVE-2008-6156

This CVE-2008-6156 describes an SQL injection in AdMan 1.1.20070907, specifically in editCampaign.php where the campaignId parameter can be exploited by remote authenticated users to execute arbitrary SQL commands. The available references (NVD, CVE records, and external advisories) confirm the v...

CVE-2008-6156

creationtimestamp| type| source ---|---|--- 2008-10-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6702...

CVE-2008-3390

creationtimestamp| type| source ---|---|--- 2008-07-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6156...

CVE-2007-6156

BASE/Base Analysis and Security Engine (BASE) before 1.3.9 contains cross-site scripting in base_qry_main.php, exploitable via sig[0] and sig[1] parameters. This affects BASE 1.3.8 and earlier releases per CVE-2007-6156. Impact: remote attackers can inject arbitrary web script/HTML. Mitigation: u...

CVE-2006-6156

The CVE-2006-6156 entry describes a Cross-site scripting (XSS) vulnerability in the HIOX Star Rating System Script (HSRS) up to version 1.0, with the flaw located in auth/message.php and exploitable via the PHP_SELF query string. The underlying cause is unencoded user input that allows arbitrary ...