CVE-2010-0973

SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0974: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 videoshow.php, 2 spotlightdetail.php, 3 realestatedetails.php, and 4 autodetails.php...

CVE-2010-0964: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action...

CVE-2010-0973: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

CVE-2010-0955

SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4690: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

CVE-2009-4682: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action...

CVE-2010-0955

SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0955: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0948: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profil.php in Bigforum 4.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0945: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the HotBrackets Tournament Brackets comhotbrackets component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Sql injection

SQL injection vulnerability in index.php in nv2 Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...

CVE-2010-0799

Directory traversal vulnerability in misc/tellafriend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

PT-2010-2498 · Commodityrentals · Commodityrentals Cd Rental

Name of the Vulnerable Software and Affected Versions: CommodityRentals CD Rental Software affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the cat id parameter in a "catalog" action within the index.p...

CVE-2010-0802: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in nv2 Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...

CVE-2010-0799: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in misc/tellafriend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2010-0758: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newsdesc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands via the id parameter...