CVE-2005-4608

CVE-2005-4608 : Affects BugPort 1.147 (index.php). The vulnerability is a SQL injection in the parameters (1) devWherePair[0], (2) orderBy, (3) where, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper handling of input parameters leading to SQL injection. Impact: d...

Sql injection

SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...

Sql injection

SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands via the readold parameter...

CVE-2006-0065

CVE-2006-0065 describes an SQL injection vulnerability in VEGO Web Forum versions up to and including 1.26, affecting (1) functions.php, (2) functions_update.php, and (3) functions_display.php. The flaw allows remote attackers to execute arbitrary SQL commands via the theme_id parameter in index....

CVE-2006-0066

CVE-2006-0066 affects PHPjournaler 1.0. The vulnerability is an SQL injection in index.php via the readold parameter, allowing remote execution of arbitrary SQL commands. Root cause appears to be unsanitized user input in the query. No remediation details are provided in the connected documents.

CVE-2005-4609

index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration via an invalid action parameter...

CVE-2005-4651

SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter...

CVE-2005-4640

SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 pollid or 2 previouspoll parameters...

CVE-2005-4645

SQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL commands via the LangueID parameter...

CVE-2005-4630

SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the 1 billshowid, 2 billdetailid, 3 fuse, and 4 frmClientID parameters...

CVE-2005-4634

SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the provenance of this information is unknown because the source URL is not available; the details are obtained solely from third part...

CVE-2005-4527

Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute arbitrary SQL commands via 1 the setLang parameter in index.php and 2 unspecified search module parameters...

CVE-2005-4527

CVE-2005-4527 involves Direct News 4.9 with multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL via (1) the setLang parameter in index.php and (2) unspecified search module parameters. NVD reports a base score of 7.5 (HIGH) with Network attack vector...

cerberusHelp.txt

Title: Cerberus Helpdesk multiple vulnerabilities. Severity: Medium Affected: cerberus-gui 2.649, support-center 2.6493.2.0pr2 Problem type: remote Author: Alejandro Ramos Description: ------------------------------------------------------------------------------- Cerberus Helpdesk is a WebGroup...

CVE-2005-4478

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 menuid parameter to a index.php and b guestbook.php, and the 2 forumid and 3 reporeidprint parameters to c print.php...

CVE-2005-4478

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 menuid parameter to a index.php and b guestbook.php, and the 2 forumid and 3 reporeidprint parameters to c print.php...

Beehive Forum 0.6.2 - index.php SQL Injection

Beehive Forum 0.6.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/16521/info Beehive Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation can allow an attacker to...

CVE-2005-4461

SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the usersess parameter...

CVE-2005-4461

The CVE-2005-4461 entry concerns Beehive Forum (version 0.6.2 and earlier) with a SQL injection in index.php triggered by the user_sess parameter. The underlying issue allows an attacker to remotely execute arbitrary SQL commands, affecting the database via the vulnerable script. The available re...

CVE-2005-4435

Cross-site scripting XSS vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...