CVE-2010-4839: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the eventid parameter in a register action...

CVE-2010-4365: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in JE Ajax Event Calendar comjeajaxeventcalendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an alleventlistmore action to index.php...

CVE-2010-0795: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JE Event Calendars comjeeventcalendar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an event action to index.php...

Joomla! Component JE Event Calendar - SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Event Calendar SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom...

Joomla! Component JE Event Calendar - SQL Injection

Joomla! Component JE Event Calendar - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Event Calendar SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

Sql injection

SQL injection vulnerability in webCal3detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2009-1945

SQL injection vulnerability in webCal3detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2009-1945: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in webCal3detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2009-0805: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the eventid parameter in index.php...

CVE-2008-4497: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in eventdetail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

PHP Booking Calendar 10 d Remote SQL Injection Exploit

No description provided by source. Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Ja...

CVE-2006-3474

Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to a gbrowse.php, 2 cardid parameter to b rating.php and c create.php, and the 3 eventid parameter to d search.php...

CVE-2006-3494: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the 1 catid parameter to a viewclassifieds.php; 2 id parameter in b viewad.php; 3 eventid parameter in c viewevent.php, d deleteevent.php, and e editevent.php;...

CVE-2006-3052: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the 1 eventid parameter to view-event-details.php or 2 selectevents parameter to event-registration.php. NOTE: the provenance of this information is unknown; the details...

CVE-2006-1422

SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

Sql injection

SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2006-1422: Undefined Security Weakness

SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2005-4397

SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the EventID parameter...

CVE-2005-4397

SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the EventID parameter...

CVE-2005-4397

CVE-2005-4397 describes an SQL injection vulnerability in iCMS’s RunScript.asp where the Event_ID parameter enables remote attackers to execute arbitrary SQL commands. Public references (OSVDB, Secunia, NVD) list a CVSS v2 base score of 7.5 (HIGH) with network access, no authentication, and parti...