CVE-2012-1648

Cross-site scripting XSS vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors...

CVE-2012-1649

Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors...

CVE-2012-1648

The CVE-2012-1648 issue affects the Drupal Cool aid module (6.x-1.x) prior to 6.x-1.9. The root cause is improper user input sanitization combined with insufficient access checks, allowing remote authenticated users with the administer coolaid permission to inject arbitrary script/HTML via unspec...

CVE-2012-1649

CVE-2012-1649 affects the Drupal Cool Aid module prior to 6.x-1.9. The vulnerability is an access-control bypass that allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors. The root cause is insufficient access restriction enfor...

PT-2012-3412

Name of the Vulnerable Software and Affected Versions Drupal Cool Aid module versions prior to 6.x-1.9 Description The issue allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site...

CVE-2012-1649: Undefined Security Weakness

Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors...

CVE-2012-1648: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3413

Name of the Vulnerable Software and Affected Versions Cool Aid module versions prior to 6.x-1.9 for Drupal Description The issue concerns the Cool Aid module for Drupal, where access restrictions are not properly enforced. This allows remote authenticated users with the administer coolaid...

Student Suspected in University Hack That Leaked Info of 654K Cornhuskers

Officials at the University of Nebraska suspect a current undergraduate student is behind a hack earlier this month that appears to have spilled the sensitive information of tens of thousands of past and present students. According to a report from the Omaha World-Herald today, Police Chief Owen...

[SECURITY] Fedora 15 Update: kdeaccessibility-4.6.2-1.fc15

Included with this package are: kmag: a screen magnifier kmousetool: a program for people whom it hurts to click the mouse kmouth: program that allows people who have lost their voice jovie: text to speech support...

PT-2011-3212

Name of the Vulnerable Software and Affected Versions Aphpkb versions 0.95.3 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the aid parameter in the saa.php file. Recommendations For versions 0.95.3 and earlier, update to a versio...

CVE-2011-1555: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase Aphpkb 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third party information...

CVE-2010-1874: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Real Estate Property comproperties component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1873: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Jvehicles comjvehicles component 1.0, 2.0, and 2.1111 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information...

PHP-Nuke 5.0 - Viewslink SQL Injection

PHP-Nuke 5.0 - Viewslink SQL Injection Author: CMD Contact: [email protected] Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : Exploit 1: /links.php?op=viewslink&sid=-1//union//select//0,aid//from//nukeauthors//where//radminsuper=1/...

CVE-2009-4475: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Joomlub comjoomlub component for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an auction edit action to index.php...

CVE-2009-4058: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in allauctions.php in Telebid Auction Script allows remote attackers to execute arbitrary SQL commands via the aid parameter...

Sql injection

Multiple SQL injection vulnerabilities in Invision Power Board IPB or IP.Board 3.0.0, 3.0.1, and 3.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 searchterm parameter to admin/applications/core/modulespublic/search/search.php and 2 aid parameter to...