CVE-2004-1968

The readmsg action in myhome.php in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter...

CVE-2004-1843

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to 1 resend.asp or 2 newsview.asp...

CVE-2005-0677

index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter...

CVE-2005-1171

Cross-site scripting XSS vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-1170

This CVE refers to an SQL injection in PHPBB’s datenbank module (mod.php) where the id parameter enables remote SQL execution. The underlying vulnerability is an injectable query in mod.php, exposing potential data exposure and integrity impacts (CVSS v2 base score 7.5, HIGH). Affected component ...

CVE-2005-1050

The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message...

CVE-2005-1081

Cross-site scripting XSS vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-0936

Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cain & Abel sniffer buffer overflow

Heap buffer overflow on oversized PKI ID parameter...

CVE-2005-0677

CVE-2005-0677 affects Zorum 3.5 where the file index.php allows remote attackers to perform certain actions as other users by modifying the id parameter. The underlying issue is parameter manipulation that enables privilege escalation within the application, leading to actions executed with anoth...

CVE-2005-0677

index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter...

CVE-2004-1519

SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via 1 the bugid parameter in a viewvotes operation or 2 the project parameter in an add operation...

CVE-2004-1551

Cross-site scripting XSS vulnerability in the 1 email or 2 file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter...

PT-2004-3453 · Lbe · Lbe Web Helpdesk

Name of the Vulnerable Software and Affected Versions: LBE Web Helpdesk versions prior to 4.0.0.81 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the jobedit.asp file. Recommendations: For versions prior to 4.0.0.81, upda...

CVE-2004-1608

SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation...

CVE-2004-0660

Cross-site scripting XSS vulnerability in 1 showarchives.php, 2 shownews.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the id parameter...

CVE-2004-0671

Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying the id parameter in a viewMsgDetails.do request...

CVE-2002-1115

Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the fid bug ID parameter to 1 bugupdateadvancedpage.php, 2 bugupdatepage.php, 3 viewbugadvancedpage.php, or 4 viewbugpage.php...

CVE-2001-1401

Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in 1 processbug.cgi, 2 showactivity.cgi, 3 showvotes.cgi, 4 showdependencytree.cgi, 5 showdependencygraph.cgi, 6...

CVE-2002-0584

WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the tsappprocess.asp script, which is easily guessable because it is incremented by 1 for each new timesheet...