Cross site scripting

Cross-site scripting XSS vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4802: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4782

SQL injection vulnerability in public/code/cppollsresults.php in All In One Control Panel AIOCP 1.4 allows remote attackers to execute arbitrary SQL commands via the pollid parameter...

Sql injection

SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4785: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4755

SQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a addpostit.php b delete.php, and c modprestdate.php; and the 2 prev parameter to d prestdetail.php...

CVE-2008-4755: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4759: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

CVE-2008-4760: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lecture.php in Graphiks MyForum 1.3, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

WordPress Plugin Media Holder - SQL Injection

WordPress Plugin Media Holder - SQL Injection ------------------------------------------------------------------- WordPress Media Holder id Sql injetion vulnerability! -------------------------------------------------------------------...

CVE-2008-4738: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Etomite CMS id Paramater SQL Injection

The remote web server contains a PHP script that is affected by a SQL injection vulnerability. Description: The remote web server is running Etomite CMS, a PHP-based content management system. The version of Etomite CMS installed on the remote host fails to sanitize input to the 'id' parameter...

CVE-2008-4709

SQL injection vulnerability in newsread.php in Pilot Group PG eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in newsread.php in Pilot Group PG eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in successstory.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4711

SQL injection vulnerability in Joovili 3.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.blog.php, 2 view.event.php, 3 view.group.php, 4 view.music.php, 5 view.picture.php, and 6 view.video.php...

CVE-2008-4709

SQL injection vulnerability in newsread.php in Pilot Group PG eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4711: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Joovili 3.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.blog.php, 2 view.event.php, 3 view.group.php, 4 view.music.php, 5 view.picture.php, and 6 view.video.php...