PT-2014-4266

Name of the Vulnerable Software and Affected Versions Command School Student Management System version 1.06.01 Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to various PHP files, including "admin school names.php", "admin...

CVE-2013-6872

SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action...

CVE-2013-6872: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action...

PT-2014-3211

Name of the Vulnerable Software and Affected Versions Collabtive versions prior to 1.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter in a "projectpdf" action within the managetimetracker.php file. Recommendations F...

PT-2014-2396

Name of the Vulnerable Software and Affected Versions Newsletter Manager plugin versions 1.0.2 and earlier for WordPress Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in the admin/test mail.php file. This could...

CVE-2012-6627: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/testmail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Sql injection

SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to default.asp...

CVE-2013-7278: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to default.asp...

PT-2014-3327

Name of the Vulnerable Software and Affected Versions Naxtech CMS Afroditi version 1.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in the "default.asp" endpoint. Recommendations For Naxtech CMS...

Sql injection

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

CVE-2013-7216

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

CVE-2013-7216: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

PT-2013-6296

Name of the Vulnerable Software and Affected Versions Classifieds Creator version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ID parameter to "demo/classifieds/product.asp", or the UserID or Password field to...

Sql injection

SQL injection vulnerability in action.php in Leed Light Feed, possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action...

CVE-2013-2627: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in action.php in Leed Light Feed, possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action...

PT-2013-3858

Name of the Vulnerable Software and Affected Versions Leed Light Feed versions prior to 1.5 Stable Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in a "removeFolder" action in the "action.php" file. Recommendations For versio...

Sql injection

SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

Directory traversal

Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the 1 tmpid parameter to websitebuilder/showtemplateimage.php, 2 fname parameter to admin/downloadfile.php, or 3 id parameter to support/admin/csvdownload.php; or ...

CVE-2013-7190

Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the 1 tmpid parameter to websitebuilder/showtemplateimage.php, 2 fname parameter to admin/downloadfile.php, or 3 id parameter to support/admin/csvdownload.php; or ...

CVE-2013-7187: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...