CVE-2011-5103: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

PT-2012-2084

Name of the Vulnerable Software and Affected Versions Flexible Custom Post Type plugin versions prior to 0.1.7 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the id parameter in the edit-post.php file...

PT-2012-2081

Name of the Vulnerable Software and Affected Versions Alurian Prismotube PHP Video Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "index.php" endpoint. Recommendations At the...

CVE-2011-5099

SQL injection vulnerability in helper/popup.php in the ccNewsletter modccnewsletter component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in helper/popup.php in the ccNewsletter modccnewsletter component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-2077

Name of the Vulnerable Software and Affected Versions ccNewsletter mod ccnewsletter versions 1.0.7 through 1.0.9 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the helper/popup.php file. Recommendations For versions 1.0.7 throug...

CVE-2011-5099: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in helper/popup.php in the ccNewsletter modccnewsletter component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-4282

SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-4282: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5310

Name of the Vulnerable Software and Affected Versions Trombinoscope version 3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "photo.php" file. Recommendations For Trombinoscope version 3.5, consider restricting acces...

Openconstructor CMS 3.12.0 - id Multiple SQL Injections

Openconstructor CMS 3.12.0 - id Multiple SQL Injections Title: Openconstructor CMS 3.12.0 'id' parameter multiple SQL injection vulnerabilities Affected Software: http://www.openconstructor.org/ http://code.google.com/p/openconstructor/downloads/list...

CVE-2012-4060: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

PT-2012-5178

Name of the Vulnerable Software and Affected Versions ASP-DEv XM Forums version RC3 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by exploiting the id parameter in the following API endpoints: "profile.asp", "forum.asp", or "topic.asp"...

PT-2012-5001

Name of the Vulnerable Software and Affected Versions Simple Web Content Management System version 1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to several API endpoints, including "item delete.php", "item status.php...

CVE-2012-3791: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 itemdelete.php, 2 itemstatus.php, 3 itemdetail.php, 4 itemmodify.php, or 5 itemposition.php in admin/; or 6 status parameter to...

Cross site scripting

Cross-site scripting XSS vulnerability in Support Incident Tracker SiT! 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message...

PT-2012-3896

Name of the Vulnerable Software and Affected Versions Support Incident Tracker SiT! versions 3.65 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to "index.php", which is not properly handled in an error...

CVE-2012-2235: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Support Incident Tracker SiT! 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message...

CVE-2012-2913: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 leafletlayer.php or 2 leafletmarker.php, as reachable through wp-admin/admin.php...