CVE-2012-0983: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

CVE-2011-5072

Multiple SQL injection vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to portal/kb.php; 2 contractid parameter to contractaddservice.php; 3 id parameter to editescalationpath.php; 4 unlock, 5 lock...

Sql injection

SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal DZCP 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php...

PT-2012-2940

Name of the Vulnerable Software and Affected Versions deV!L'z Clanportal DZCP version 1.5.5 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in a showkat action to the "index.php" endpoint. Recommendatio...

CVE-2012-0906: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal DZCP 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php...

DEBIAN-CVE-2012-0030

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified projectid URI parameter...

PT-2011-5188

Name of the Vulnerable Software and Affected Versions Pulse Pro CMS version 1.7.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities can be exploit...

CVE-2011-3835

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

PT-2011-5109

Name of the Vulnerable Software and Affected Versions WPTouch plugin for WordPress affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the /wptouch/ajax.php API endpoint. Recommendations For the affected version,...

CVE-2011-4808: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the HM Community comhmcommunity component before 1.01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a fndhome action to index.php...

CVE-2011-4803: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-5114

Name of the Vulnerable Software and Affected Versions Joomla! component com hmcommunity version prior to 1.01 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a 'fnd home' action to 'index.php'. Recommendations For...

PT-2011-5048

Name of the Vulnerable Software and Affected Versions osCSS2 versions 2.1.0 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the ID parameter to either "catalog/shopping cart.php" or...

CVE-2011-4674

SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to execute arbitrary SQL commands via the onlyhostid parameter...

CVE-2011-4673

SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-5020

Name of the Vulnerable Software and Affected Versions Jetpack plugin for WordPress affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the modules/sharedaddy.php file. Recommendations At the moment, there is no...

CVE-2011-4673: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-4998

Name of the Vulnerable Software and Affected Versions Joomla! component Time Returns com timereturns versions 2.0 and possibly earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a timereturns action to...

CVE-2011-4570: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Time Returns comtimereturns component 2.0 and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a timereturns action to index.php...

PT-2011-4999

Name of the Vulnerable Software and Affected Versions Joomla! Estate Agent com estateagent component affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in a showEO action to...