CVE-2008-3682

CVE-2008-3682 describes an SQL injection vulnerability in dpage.php of YPN PHP Realty. The underlying issue is unsafely handling the docID parameter, enabling remote attackers to execute arbitrary SQL commands. Documents consistently state: an injection via docID could impact the application, wit...

CVE-2008-2443

SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...

Sql injection

SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...

CVE-2008-2443

SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...

CVE-2006-6486

SQL injection vulnerability in EasyPage allows remote attackers to execute arbitrary SQL commands via sptrees/default.aspx, possibly involving the docId parameter. Affects EasyPage (component/context not fully specified); root cause is an injection flaw in the handling of inputs to the page. CVSS...

CVE-2005-4509

CVE-2005-4509 describes an SQL injection in index.asp for pTools, exploitable via the docID parameter to allow remote execution of arbitrary SQL commands. Affected software is pTools; vulnerability arises from improper handling of input in the docID field. Impact, as stated, includes partial conf...