CVE-2010-5001: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-1909

Name of the Vulnerable Software and Affected Versions BrotherScripts BS and ScriptsFeed Auto Dealer affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "info.php" file. Recommendations At the...

CVE-2010-4983: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4981: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4974: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in info.php in BrotherScripts BS and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4970: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-4026

SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-4818

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the thanks.php file. Recommendations For NexusPHP version 1.5, avoid using the id parameter in the...

CVE-2011-4026: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Pre Studio Business Cards Designer - SQL Injection

Pre Studio Business Cards Designer - SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Exploit Title: Pre Studio Business Cards Designer SQL Injection Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Author: drzig Date: 20-10-2011 Softwar...

ACDSee FotoSlate - '.PLP' File 'id' Local Overflow (Metasploit)

$Id: acdseefotoslatestring.rb 13853 2011-10-10 16:47:33Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-4945

SQL injection vulnerability in the CamelcityDB comcamelcitydb2 component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Sql injection

SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078...

CVE-2010-4940

SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-1875

Name of the Vulnerable Software and Affected Versions WAnewsletter version 2.1.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "index.php" file. Recommendations For WAnewsletter version 2.1.2, consider restricting...

PT-2011-1869

Name of the Vulnerable Software and Affected Versions Get Tube versions 4.51 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the "video.php" file. Recommendations For Get Tube versions 4.51 and earlier, update to a version later...

CVE-2010-4955: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078...