CVE-2009-3970: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP Dir Submit aka WebsiteSubmitter or Submitter Script allows remote authenticated users to execute arbitrary SQL commands via the aid parameter in a showarticle action...

CVE-2009-3974: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Invision Power Board IPB or IP.Board 3.0.0, 3.0.1, and 3.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 searchterm parameter to admin/applications/core/modulespublic/search/search.php and 2 aid parameter to...

Unfixed XSS vulnerability at www.legalaid.on.ca

Security researcher Xylitol, has submitted on 10/01/2009 a cross-site-scripting XSS vulnerability affecting www.legalaid.on.ca, which at the time of submission ranked 807158 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

Afian - includer.php Directory Traversal

Afian - includer.php Directory Traversal source: https://www.securityfocus.com/bid/33943/info Afian is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that...

“Cocktail”therapy to deal with the variety of Trojan hybrid intrusion-vulnerability warning-the black bar safety net

Here is a quote of the“cocktail”therapy is a medical term, refers to the physician while using the a variety of anti-viral drugs to deal with AIDS. For a computer virus to a single tool in particular is very well-known tool is very easy to be viral as against the target without losing effect, it'...

CVE-2008-4804: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Gallery module 1.3 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the aid parameter in a showalbum action to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue was disclosed by an...

CVE-2008-4345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter...

CVE-2008-0795: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the MGFi XfaQ comxfaq 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action...

Joomla Component xfaq 1.2 (aid) Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomxfaq AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MA陌L : [email protected] [email protected] DORK 1 : allinurl: aid "comxfaq" DORK 2 : allinurl: "comxfaq" EXPLOIT :...

CVE-2008-0579: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the buslicense combuslicense component for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in a list action...

CVE-2008-0515

SQL injection vulnerability in index.php in the musepoes commusepoes component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action...

CVE-2008-0515

SQL injection vulnerability in index.php in the musepoes commusepoes component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action...

CVE-2008-0515: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the musepoes commusepoes component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action...

phpnuke80final-sql.txt

?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...

CVE-2007-4603: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the aid parameter in a showarticle action or 2 the catid parameter in a showcat action...

SimpleFAQ Component for Joomla! 'aid' Parameter SQLi

The version of the SimpleFAQ component for Joomla! and Mambo running on the remote host is affected by a SQL injection vulnerability in the simplephp.php script due to improper sanitization of user-supplied input to the 'aid' parameter before using it to construct database queries in the...

CVE-2007-4456: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the SimpleFAQ comsimplefaq 2.11 component for Mambo allows remote attackers to execute arbitrary SQL commands via the aid parameter. NOTE: it was later reported that 2.40 is also affected, and that the component can be used in Joomla! in addition to Mam...

CVE-2006-5622: Undefined Security Weakness

SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter...

CVE-2005-1053

Multiple cross-site scripting XSS vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ccode or 2 aid parameters...

CVE-2005-1053: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ccode or 2 aid parameters...