9763 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...
CVE-2010-0955
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-4682: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action...
CVE-2009-4690: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...
CVE-2010-0955
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-0955: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-0948: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in profil.php in Bigforum 4.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-0945: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the HotBrackets Tournament Brackets comhotbrackets component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
Sql injection
SQL injection vulnerability in index.php in nv2 Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...
CVE-2010-0799
Directory traversal vulnerability in misc/tellafriend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...
PT-2010-2498 · Commodityrentals · Commodityrentals Cd Rental
Name of the Vulnerable Software and Affected Versions: CommodityRentals CD Rental Software affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the cat id parameter in a "catalog" action within the index.p...
CVE-2010-0799: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in misc/tellafriend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...
CVE-2010-0802: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in nv2 Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...
CVE-2010-0758: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in newsdesc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-0722
SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter...