PT-2012-5718

Name of the Vulnerable Software and Affected Versions Witze addon version 0.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a "show" action within the jokes/index.php file. Recommendations For Witze addon versio...

CVE-2012-5000: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

CVE-2012-4994: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NOTE: some of these details are obtained from third party information...

CVE-2011-5168

SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5168

SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5168: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-2145 · Unknown · Banana Dance

Name of the Vulnerable Software and Affected Versions: Banana Dance versions prior to B.1.5 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the user.php file. Recommendations: For versions prior to B.1.5, update to version...

Sichkg CMS SQL Injection

Exploit Title: sichkg CMS SQL Injection Vulnerability Google Dork: "Powered by sichkg.com" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.sichkg.com Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Serv...

PT-2012-5620

Name of the Vulnerable Software and Affected Versions Kunena component version 1.7.2 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the news.php file. This can lead to unauthorized access and manipulation of database content...

CVE-2012-4868: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5139

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5137

Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL commands via the 1 TopicID parameter to viewtopic.php, the 2 BoardID parameter to viewboard.php, or 3 CatID parameter to viewcat.php...

CVE-2011-5139: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-4949: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/withdb/loaddetails.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-2015

Name of the Vulnerable Software and Affected Versions EGroupware Enterprise Line versions prior to 11.1.20110804-1 EGroupware Community Edition versions prior to 1.8.001.20110805 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter...

PT-2012-2117

Name of the Vulnerable Software and Affected Versions Pre Studio Business Cards Designer affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the page.php file. Recommendations At the moment, there is no informatio...

Power-eCommerce CMS Cross Site Scripting

Exploit Title: Power-eCommerce CMS Cross Site Scripting Vulnerability Google Dork:intext:"Site Powered by: Power-eCommerce.com" Date: 08/24/2012 Author: Crim3R Vendor Home : http://www.power-ecommerce.com/ Tested on: all ======================================== id parametr in Questions.asp and 7 ...

CVE-2011-5106

Cross-site scripting XSS vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2011-5106: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter...