CVE-2012-5288: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5294: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in artdetalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5888

Name of the Vulnerable Software and Affected Versions Plogger version 1.0 RC1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by exploiting the id parameter in the API endpoints, specifically in "index.php" or "gallery.php". Recommendations Fo...

PT-2012-5891

Name of the Vulnerable Software and Affected Versions Atar2b CMS version 4.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to several API endpoints: "gallery e.php", "pageE.php", or "pageH.php". Recommendations For...

PT-2012-5899

Name of the Vulnerable Software and Affected Versions MyStore Xpress Tienda Virtual version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "art catalogo.php" file. Recommendations For MyStore Xpress Tienda Virtual...

CVE-2012-5300: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in artcatalogo.php in MyStore Xpress Tienda Virtual 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5292: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 gallerye.php, 2 pageE.php, or 3 pageH.php...

CVE-2012-5289: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 index.php or 2 gallery.php...

PT-2012-5896

Name of the Vulnerable Software and Affected Versions Mavili Guestbook affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the "edit.asp" file. This enables attackers to manipulate the database by injecting...

CVE-2012-5297: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5893

Name of the Vulnerable Software and Affected Versions MyStore Xpress Tienda Virtual affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the art detalle.php file. Recommendations For MyStore Xpres...

CVE-2012-1603

Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL commands via the 1 curstr parameter in the findUsers function, 2 id parameter in the isIdAvailable function, or 3 username parameter in the getGreetings function...

Sql injection

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5227

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5227: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5839

Name of the Vulnerable Software and Affected Versions Peel SHOPPING versions 2.8 through 2.9 Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the administrer/tva.php file. Recommendations For Peel SHOPPING versions 2.8 through 2.9, avoid usin...

CVE-2012-5163

Cross-site scripting XSS vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enablecategory action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enablecategory action to index.php...

CVE-2012-5162

Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 editcategorypost or 2 enablecategory action to index.php...

CVE-2012-5163

Cross-site scripting XSS vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enablecategory action to index.php...