CVE-2010-1051

CVE-2010-1051 affects AudiStat 1.3 and describes multiple SQL injection vulnerabilities in index.php exploitable via the year and month parameters, enabling remote execution of arbitrary SQL. The CVSSv2 base score is 7.5 (HIGH) with network attack vector and no authentication. Public details are ...

CVE-2010-1051

Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 year and 2 month parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CMS Openpage - index.php SQL Injection

CMS Openpage - index.php SQL Injection ==================================================== CMS Openpage index.php SQL Injection Vulnerability ==================================================== + Discovered by: Phenom + My id: http://inj3ct0r.com/author/2157 + Original:...

PowieSys 0.7.7 Alpha SQL Injection

----------------------------Information------------------------------------------------ +Name : PowieSys = 0.7.7 alpha index.php shownews SQL Injection Vulnerability +Autor : Easy Laster +Date : 22.03.2010 +Script : PowieSys = 0.7.7 alpha +Download :...

CVE-2010-1049: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the 1 noentryid parameter to blog/index.php and the 2 p parameter to index2.php...

PowieSys 0.7.7 alpha - 'index.php' shownews SQL Injection

----------------------------Information------------------------------------------------ +Name : PowieSys = 0.7.7 alpha index.php shownews SQL Injection Vulnerability +Autor : Easy Laster +Date : 22.03.2010 +Script : PowieSys = 0.7.7 alpha +Download :...

CMS Openpage SQL Injection

==================================================== CMS Openpage index.php SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

CVE-2010-1051: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 year and 2 month parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-1052: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 mday parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-1046: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 userid username and 2 password parameters...

CVE-2010-1047: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a singer action...

CVE-2010-1048: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter aka the Comment Box in a noentryid action. NOTE: some of these details are obtained from third party information...

CVE-2010-1043: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

CVE-2010-1050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter...

PowieSys 0.7.7 alpha - index.php shownews SQL Injection

PowieSys 0.7.7 alpha - index.php shownews SQL Injection ----------------------------Information------------------------------------------------ +Name : PowieSys = 0.7.7 alpha index.php shownews SQL Injection Vulnerability +Autor : Easy Laster +Date : 22.03.2010 +Script : PowieSys = 0.7.7 alpha...

CMS Openpage - 'index.php' SQL Injection

==================================================== CMS Openpage index.php SQL Injection Vulnerability ==================================================== + Discovered by: Phenom + My id: http://inj3ct0r.com/author/2157 + Original: http://inj3ct0r.com/exploits/9666 Exploit Title: CMS Openpage...

Flex CMS <= 2.5 (index.php)Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Flex CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By...

Sql injection

SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter...

CVE-2009-4719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter...

CVE-2009-4732: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tt/index.php in TT Web Site Manager 0.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the ttname parameter. NOTE: some of these details are obtained from third party information...