7229 matches found
CVE-2009-2601
SQL injection vulnerability in the Joomlaequipment aka JUser or comjuser component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showprofile action to index.php...
CVE-2009-2603
Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 tid parameters...
CVE-2009-2598
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...
CVE-2009-2603
CVE-2009-2603 : The content shows concrete details: Escon SupportPortal Pro 3.0 contains multiple SQL injection flaws in index.php, exploitable via the (1) cat and (2) tid parameters. Remote attackers could execute arbitrary SQL commands. Impact is partial confidentiality, integrity, and availabi...
Basilic 1.5.13 - index.php Cross-Site Scripting
Basilic 1.5.13 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43372/info Basilic is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
CVE-2009-2589
Multiple cross-site scripting XSS vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 feedback.php, 2 index.php, and 3 lostpassword.php...
Basilic 1.5.13 (index.php idAuthor) SQL Injection Vulnerability
No description provided by source. ================================================================================================== o Basilic 1.5.13 SQL Injection Vulnerability Software : Basilic version 1.5.13 Vendor : http://artis.imag.fr/Software/Basilic/ Download :...
Basilic 1.5.13 SQL Injection
================================================================================================== o Basilic 1.5.13 SQL Injection Vulnerability Software : Basilic version 1.5.13 Vendor : http://artis.imag.fr/Software/Basilic/ Download : http://artis.imag.fr/Software/Basilic/basilic-1.5.14.tar.gz...
Basilic 1.5.13 - index.php?idAuthor SQL Injection
Basilic 1.5.13 - index.php?idAuthor SQL Injection ================================================================================================== o Basilic 1.5.13 SQL Injection Vulnerability Software : Basilic version 1.5.13 Vendor : http://artis.imag.fr/Software/Basilic/ Download :...
Basilic 1.5.13 (index.php idAuthor) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== Basilic 1.5.13 index.php idAuthor SQL Injection Vulnerability ===============================================================...
Basilic 1.5.13 - 'index.php?idAuthor' SQL Injection
================================================================================================== o Basilic 1.5.13 SQL Injection Vulnerability Software : Basilic version 1.5.13 Vendor : http://artis.imag.fr/Software/Basilic/ Download : http://artis.imag.fr/Software/Basilic/basilic-1.5.14.tar.gz...
CVE-2009-2574
index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...
CVE-2009-2574
index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...
CVE-2009-2569
Multiple cross-site scripting XSS vulnerabilities in Verlihub Control Panel VHCP 1.7e allow remote attackers to inject arbitrary web script or HTML via 1 the nick parameter in a login action to index.php or 2 the URI in a news request to index.html...
CVE-2009-2574
CVE-2009-2574 affects MiniTwitter 0.2 beta. The flaw in index.php lets remote authenticated users modify certain options of arbitrary accounts via an opt action. Exploitation is documented (Exploit-DB) and related references link to insecure parameter handling; CVSS from NVD indicates a medium ri...
dB Masters MultiMedias Content Manager 4.5 - SQL Injection
dB Masters MultiMedias Content Manager 4.5 - SQL Injection =========================================================================================== o dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability Software : dB Masters Multimedia's Content Manager version 4.5 Vendor :...
dB Masters MultiMedia's Content Manager 4.5 - SQL Injection
=========================================================================================== o dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability Software : dB Masters Multimedia's Content Manager version 4.5 Vendor : http://www.dbmasters.net/ Author : NoGe Contact :...
dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability
No description provided by source. =========================================================================================== o dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability Software : dB Masters Multimedia's Content Manager version 4.5 Vendor : http://www.dbmasters.net...
CVE-2009-2451
Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters in a calendar action, or 3 a search term in the search form...
