CVE-2012-4771: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 admin/accounts/, 2 admin/manage/, or 3 admin/manage/blocks/edit/; or 4 group parameter to admin/configuration/. NOTE: The...

PT-2012-5582

Name of the Vulnerable Software and Affected Versions Subrion CMS versions prior to 2.2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the id parameter to API endpoints such as "/admin/accounts/", "/admin/manage/", or...

Sql injection

Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...

PT-2012-5937

Name of the Vulnerable Software and Affected Versions SenseSites CommonSense CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting SQL injection vulnerabilities via the id parameter in several API...

PT-2012-5945

Name of the Vulnerable Software and Affected Versions Pay With Tweet plugin versions prior to 1.2 Description The issue allows remote authenticated users with certain permissions to execute arbitrary SQL commands. This is achieved via the id parameter in a "paywithtweet" shortcode. Recommendation...

CVE-2012-5350: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode...

CVE-2012-5342: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...

CVE-2012-5333

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5333

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated users to execute arbitrary SQL commands via the 1 memberid or 2 groupid parameters in a removemember action or 3 id parameter to...

CVE-2012-5312: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

PT-2012-5911

Name of the Vulnerable Software and Affected Versions Tribiq CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "index.php" endpoint. Recommendations At the moment, there is no informati...

CVE-2012-5333: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5297

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5294

SQL injection vulnerability in artdetalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5297

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5292: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 gallerye.php, 2 pageE.php, or 3 pageH.php...

CVE-2012-5296: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 approve.asp, 2 delete.asp, 3 edit.asp, or 4 edit2.asp...

PT-2012-5896

Name of the Vulnerable Software and Affected Versions Mavili Guestbook affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the "edit.asp" file. This enables attackers to manipulate the database by injecting...