CVE-2010-0802

SQL injection vulnerability in index.php in nv2 Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...

CVE-2010-0802

The CVE-2010-0802 entry concerns the (nv2) Awards 1.1.0 modification for Invision Power Board. A vulnerability in index.php allows SQL injection via the id parameter in a view action, enabling remote attackers to execute arbitrary SQL commands. The issue affects the affected file/function and can...

CVE-2010-0804

CVE-2010-0804 : The vulnerability is a cross-site scripting (XSS) flaw in the iBoutique 4.0 application, specifically in index.php. The issue arises when a crafted value is supplied to the key parameter in a products action, allowing remote attackers to inject arbitrary web script or HTML. The af...

Sql injection

SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

Sql injection

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action...

CVE-2010-0764

CVE-2010-0764 describes a SQL injection in KuwaitPHP eSmile's index.php during the show action, exploitable via the cid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The provided documents confirm the affected component and the injection vector but do not...

CVE-2010-0804: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter in a products action...

CVE-2010-0795: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JE Event Calendars comjeeventcalendar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an event action to index.php...

CVE-2010-0803: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the jVideoDirect comjvideodirect component 1.1 RC3b for Joomla! allows remote attackers to execute arbitrary SQL commands via the v parameter to index.php...

CVE-2010-0796: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JE Quiz comjequizmanagement component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a question action to index.php...

CVE-2010-0761: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a gamecatalog action...

CVE-2010-0762: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

CVE-2010-0802: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in nv2 Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...

CVE-2010-0763: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL commands via the rentalid parameter in a CalendarView action...

CVE-2010-0764: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action...

phpMySite Cross Site Scripting / SQL Injection

================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Software Link: http://www.phpmysite.com/ Version: N/A...

Uiga Personal Portal index.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Uiga Personal Portal index.php SQL Injection Vulnerability ==========================================================...

Joomla! Component com_liveticker - Blind SQL Injection

!/usr/bin/php » Greetz to: Spécial His0k4 Tous les hackers Algérie » Dork: inurl:index.php?option=comliveticker "viewticker" Joomla comliveticker tid Blind SQL Injection Exploit x Usage: Snakespc.php "http://url/index.php?option=comliveticker&task=viewticker&tid=1" '; if $argc 1 $url = $argv1; $r...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the which parameter in a copy action...

phpMySite - Cross-Site Scripting SQL Injection

phpMySite - Cross-Site Scripting SQL Injection ================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Softwar...