CVE-2006-4497: Undefined Security Weakness

SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4490: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. dot dot sequence via the id parameter in 1 scripts/cbag/ag.exe or 2 scripts/s360v2/s360.exe...

CVE-2006-4351: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-4350: Undefined Security Weakness

SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4300

SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4300

SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4300: Undefined Security Weakness

SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4284: Undefined Security Weakness

SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4122: Undefined Security Weakness

Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php...

CVE-2006-4064: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it was later reported reported that 2.0 is also affected...

CVE-2006-3881: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI. NOTE: the id parameter in index.php, and the type and show parameters in a top action, are already...

CVE-2006-3832: Undefined Security Weakness

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3763: Undefined Security Weakness

SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3688: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3525: Undefined Security Weakness

SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3518: Undefined Security Weakness

SQL injection vulnerability in SayfalaAltList.asp in Webvizyon Portal 2006 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-3364

SQL injection vulnerability in index.php in the NPSEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3364: Undefined Security Weakness

SQL injection vulnerability in index.php in the NPSEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3385: Undefined Security Weakness

Cross-site scripting XSS vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject arbitrary web script or HTML via the 1 id and 2 disabled parameters...

CVE-2006-3347: Undefined Security Weakness

SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...