6854 matches found
Sql injection
SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4488
Cross-site scripting XSS vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name and 2 id parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4468
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in showseriesink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4374
SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the id parameter in a playgame action...
CVE-2008-4374
CVE-2008-4374 describes an SQL injection in CMS Buzz: index.php vulnerable to manipulation of the id parameter in the playgame action, enabling remote SQL command execution. The issue is due to improper input handling in the affected PHP file, with CVSS v2 indicating High severity (base score 7.5...
CVE-2008-4379
Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-4357
SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4355
SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum aka PHP Forum or pForum 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4150
SQL injection vulnerability in picturecategory.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763...
Sql injection
SQL injection vulnerability in picturecategory.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763...
Sql injection
Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 ucat parameter to upgrade.php and the 2 id parameter to linkadmin/edit.php...
Sql injection
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...
CVE-2008-4074
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...
Vastal I-Tech Share Zone (id) SQL Injection Vulnerability
No description provided by source. Vastal I-Tech Share Zone id SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $200.00 Script Home Page : http://www.vastal.com/share-zone-the-file-sharing-software.html Demo : http://www.vastal.com/rapid/ Dork : N/A Explo...
Hot Links SQL-PHP 3 - 'report.php' Multiple Vulnerabilities
/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Hot Links SQL-PHP 3 report.php Multiple Vulnerabilities Vendor:...
PT-2008-5267 · Opendb · Opendb
Name of the Vulnerable Software and Affected Versions: OpenDb version 1.0.6 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the user id parameter in an edit action to "user admin.php", the title parameter to "listings.php", and the...