CVE-2010-1090

CVE-2010-1090 describes a SQL injection in the PHP app phpMySite via the parameter action to index.php . The root cause is improper input handling allowing remote attackers to craft SQL commands; impact per sources is arbitrary SQL execution with partial confidentiality, integrity, and availabili...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Entry Level CMS EL CMS allows remote attackers to inject arbitrary web script or HTML via the subj parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are...

CVE-2010-1076

Cross-site scripting XSS vulnerability in index.php in Entry Level CMS EL CMS allows remote attackers to inject arbitrary web script or HTML via the subj parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are...

CVE-2010-1075

CVE-2010-1075 is an SQL injection vulnerability in the EL CMS (Entry Level CMS) where the vulnerable component is index.php . The issue allows remote attackers to execute arbitrary SQL commands through the subj parameter. The available documents do not specify the exact root cause in code, affect...

Directory traversal

Directory traversal vulnerability in the RokDownloads comrokdownloads component before 1.0.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

Sql injection

Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 year and 2 month parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-1043

Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

Sql injection

SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter...

CVE-2010-1052

Multiple cross-site scripting XSS vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 mday parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-1050

SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter...

Discloser 'more' Parameter SQL Injection Vulnerability

The host is running Discloser and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddisclosersqlinjvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Discloser 'more' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

Uiga Business Portal - index.php SQL Injection

Uiga Business Portal - index.php SQL Injection ----------------------------Information------------------------------------------------ +Name : Uiga Business Portal = index.php SQL Injection Vulnerability +Autor : Easy Laster +Date : 23.03.2010 +Script : Uiga Business Portal +Download :...

Zephyrus CMS (index.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================== Zephyrus CMS index.php SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Zephyrus CMS SQL Injection

==================================================== Zephyrus CMS index.php SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

Uiga Business Portal - 'index.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : Uiga Business Portal = index.php SQL Injection Vulnerability +Autor : Easy Laster +Date : 23.03.2010 +Script : Uiga Business Portal +Download :...

CVE-2010-1047

CVE-2010-1047 describes an SQL injection in index.php for MASA2EL Music City 1.0 and 1.1 that allows remote attackers to execute arbitrary SQL via the id parameter in a singer action. The vulnerability is documented across CVE/NVD sources; exploitation status is not detailed in the provided docum...

CVE-2010-1050

AudiStat

CVE-2010-1052

CVE-2010-1052 affects AudiStat 1.3, with multiple XSS vulnerabilities in index.php exploitable via the year and mday parameters. The issue is documented across multiple feeds (NVD, RH, OpenVAS, etc.) as remote attacker‑driven script/HTML injection. The connected documents provide the vulnerabilit...

CVE-2010-1050

SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter...

CVE-2010-1051

CVE-2010-1051 affects AudiStat 1.3 and describes multiple SQL injection vulnerabilities in index.php exploitable via the year and month parameters, enabling remote execution of arbitrary SQL. The CVSSv2 base score is 7.5 (HIGH) with network attack vector and no authentication. Public details are ...