CVE-2012-6521

Cross-site scripting XSS vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions...

PT-2013-1985

Name of the Vulnerable Software and Affected Versions Elefant CMS version 1.2.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the id parameter to the "admin/versions" endpoint...

CVE-2012-6504: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mods/hours/data/gethours.php in PHP Volunteer Management 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2013-1968

Name of the Vulnerable Software and Affected Versions PHP Volunteer Management version 1.0.2 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the mods/hours/data/get hours.php file. Recommendations For PHP...

CVE-2012-6521: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions...

PT-2013-2179

Name of the Vulnerable Software and Affected Versions Moxiecode plupload versions prior to 1.5.5 WordPress versions prior to 3.5.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter. This can lead to the execution of...

CVE-2012-6505: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mods/hours/data/gethours.php in PHP Volunteer Management 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 data/gallery/edit.php, 2 data/guestbook/edit.php, 3 data/file/edit.php, 4 data/htmltext/edit.php, 5 data/publication/edit.php, or 6...

CVE-2012-3873: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 data/gallery/edit.php, 2 data/guestbook/edit.php, 3 data/file/edit.php, 4 data/htmltext/edit.php, 5 data/publication/edit.php, or 6...

PT-2012-5056

Name of the Vulnerable Software and Affected Versions Open Constructor version 3.12.0 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter to several API endpoints, including "data/gallery/edit.php",...

WordPress <= 1.5.4 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "id" parameter. Solution Update the plugin...

LikeItNow Script 1.0 SQL Injection

Exploit Title: LikeItNow Script SQLi Vulnerability Google Dork: intitle:"LikeItNow - What do you like?" Date: 17.11.2012 Exploit Author: xStarCode Vendor Homepage: Software Link: Version: 1.0 Tested on: Linux Vulnerable Parameters: id Exploit Details: ========...

Sql injection

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

CVE-2012-5912: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

PT-2012-6193

Name of the Vulnerable Software and Affected Versions PicoPublisher version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to API endpoints such as "page.php" or "single.php". Recommendations For PicoPublisher version 2.0...

CVE-2011-5215

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-2195

Name of the Vulnerable Software and Affected Versions DotA OpenStats versions 1.3.9 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "index.php" endpoint. Recommendations For DotA OpenStats versions 1.3.9 and...

CVE-2011-5218: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2011-5215: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...