CVE-2007-1422: Undefined Security Weakness

SQL injection vulnerability in goster.asp in fystyq Duyuru Scripti allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-0688...

CVE-2007-1438: Undefined Security Weakness

SQL injection vulnerability in devami.asp in X-Ice News System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a komm aktion...

CVE-2007-1417: Undefined Security Weakness

SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a komm aktion...

CVE-2007-1250: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite LMS 7.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-1159

Cross-site scripting XSS vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1158

Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2006-7089

SQL injection vulnerability in connexion.php in Ban 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-7089: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in connexion.php in Ban 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-1158: Undefined Security Weakness

Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2007-1159: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1159

Cross-site scripting XSS vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1122: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 and 1.01 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php, a variant of a SQL injection...

CVE-2007-1151: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter to the top-level URI, possibly related to a SQL error...

CVE-2007-1121: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php. NOTE: some of these details are obtained...

CVE-2007-1102

Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' quote character in 1 a PHPSESSID cookie or 2 the id parameter in an article action in index.php, which reveal the path in various error messages...

Design/Logic Flaw

Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' quote character in 1 a PHPSESSID cookie or 2 the id parameter in an article action in index.php, which reveal the path in various error messages...

CVE-2007-1102

CVE-2007-1102 affects Photostand 1.2.0. The vulnerability allows remote attackers to obtain sensitive information through the string "'" in either a PHPSESSID cookie or the id parameter in index.php’s article action, causing error messages to reveal internal paths. According to NVD, the issue yie...

CVE-2007-1102

Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' quote character in 1 a PHPSESSID cookie or 2 the id parameter in an article action in index.php, which reveal the path in various error messages...

CVE-2007-1102: Undefined Security Weakness

Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' quote character in 1 a PHPSESSID cookie or 2 the id parameter in an article action in index.php, which reveal the path in various error messages...