CVE-2010-4866: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...

PT-2011-1801

Name of the Vulnerable Software and Affected Versions Chipmunk Board version 1.3 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the forumID parameter in the "index.php" file. Recommendations For Chipmunk Board version 1.3, avoi...

PT-2011-1799

Name of the Vulnerable Software and Affected Versions Joomla! Club Manager com clubmanager component affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the cm id parameter in an equip presenta...

PT-2011-1797

Name of the Vulnerable Software and Affected Versions JExtensions JE Directory com jedirectory component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in an item action to the "index.php"...

CVE-2010-4869: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...

PT-2011-4791

Name of the Vulnerable Software and Affected Versions Zikula Application Framework versions 1.2.7, 1.3.0 build 3168 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the themename parameter in the setasdefault...

WordPress Black-LetterHead Theme 1.5 - Cross Site Scripting

WordPress Black-LetterHead theme's "index.php" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

CVE-2011-3862

Cross-site scripting XSS vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2011-3865

Cross-site scripting XSS vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2011-3861: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

PT-2011-4737 · WordPress · Web Minimalist 200901 Theme

Name of the Vulnerable Software and Affected Versions: Web Minimalist 200901 theme for WordPress version 1.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "index.php". Recommendations: For Web Minimali...

CVE-2011-3862: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2011-3865: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2010-4851

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the 1 ref or 2 pollid parameter to index.php, or the 3 country parameter to createaccount.php...

Sql injection

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

CVE-2010-4845

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

PT-2011-1786

Name of the Vulnerable Software and Affected Versions Eclime version 1.1.2b Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ref or poll id parameter to "index.php", or the country parameter to "create account.php". Recommendations For...

PT-2011-1780

Name of the Vulnerable Software and Affected Versions MH Products Projekt Shop affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ts parameter to "details.php" and possibly the ilceler parameter to...