7215 matches found
CVE-2005-4287
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php...
CVE-2005-4264
CVE-2005-4264 affects PHP Support Tickets 2.0 with multiple SQL injection flaws in index.php. The vulnerability allows remote attackers to inject arbitrary SQL through the username, password, or id parameters, enabling manipulation of queries and potential authentication bypass or administrative ...
CVE-2005-4264
Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields, and 3 id parameter...
CVE-2005-4232
SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified...
CVE-2005-4232
Jamit Job Board is affected: SQL injection in index.php via the cat parameter for versions 2.4.1 and earlier. The underlying issue is a vulnerable dynamic SQL path in index.php, allowing remote attackers to execute arbitrary SQL commands. The vendor disputes the issue, and CVE records note that s...
CVE-2005-4198
SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...
Plogger Beta 2 - index.php Multiple Cross-Site Scripting Vulnerabilities
Plogger Beta 2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15839/info Plogger is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...
CVE-2005-4140
SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter, as used by the user field...
CVE-2005-4088
CVE-2005-4088 describes an SQL injection vulnerability in index.php of phpForumPro 2.2 that allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters. The issue affects phpForumPro 2.2 and is documented with a CVSSv2 base score of 7.5 (HIGH). Exploitation...
CVE-2005-4088
SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the 1 parent and 2 day parameters...
CVE-2005-4055
CVE-2005-4055 affects Cars Portal 1.1 and earlier; the vulnerability is a SQL injection in index.php exploitable via the (1) page and (2) car parameters, allowing remote attackers to execute arbitrary SQL commands. No remediation or patch details are provided in the connected sources here. Resear...
CVE-2005-4055
SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 page and 2 car parameters...
CVE-2005-4054
CVE-2005-4054 describes a SQL injection vulnerability in index.php of PluggedOut Blog 1.9.5 and earlier. The issue allows remote attackers to inject arbitrary SQL commands through the parameters (1) categoryid, (2) entryid, (3) year, (4) month, and (5) day. The connected documents confirm the aff...
CVE-2005-4035
Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 prod, and 2 brid parameters to a view.php; the 3 the bid parameter to b viewbrands.php; and the 4 grp and 5 cat parameters to...
CVE-2005-4034
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the 1 s, 2 pg, and 3 sortb parameters to a index.php; 4 cid parameter to b gift.php and c fq.php; and 5 cat parameter to d articles.php...
CVE-2005-4019
SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the mls parameter...
CVE-2005-4019
CVE-2005-4019 affects Relative Real Estate Systems, specifically versions 1.02 and earlier. It is a SQL injection in index.php exploitable via the mls parameter, allowing remote execution of arbitrary SQL commands. The vulnerability has a CVSS base score of 7.5 (HIGH) with network access, low att...
Cars Portal v1.x SQL injection.
Cars Portal v1.x SQL injection. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/cars-portal-v1x-sql-injection.html vendor:http://software.getcar.biz/ affected version:v1.1 and prior Product Description: Cars Portal is a software solution for running...
Blog System v1.2 SQL inj. vuln.
Blog System v1.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html vendor:http://www.netartmedia.net/blogsystem/ affected version:v1.2 and prior Product Description: Blog System allows you to launch and...