CVE-2009-3356: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2009-3313

Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to 1 index.php and 2 editComments.php, and 3 allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action ...

CVE-2009-3311

Cross-site scripting XSS vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Sql injection

SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute arbitrary SQL commands via the idmenu parameter...

CVE-2009-3310

CVE-2009-3310 describes an SQL injection in Zainu 1.0’s index.php, exploitable via the album_id parameter in the AlbumSongs action, allowing remote arbitrary SQL execution. The root cause is unsafe SQL query construction in the application. Public references (NVD/CVE List/PRION) corroborate the v...

CVE-2009-3311

Cross-site scripting XSS vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2009-3310

SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter in an AlbumSongs action...

CVE-2009-3315

The affected software is NeLogic Nephp Publisher Enterprise (versions 3.5.9 and 4.5). The vulnerability is a SQL injection in admin/index.php via the Username field, caused by improper handling of input in the web application. This allows remote attackers to execute arbitrary SQL commands, with t...

CVE-2009-3311

Technical details about CVE-2009-3311 are not publicly available in the provided connected documents. Monitor for updates from vendors or security advisories.

CVE-2009-3326: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute arbitrary SQL commands via the idmenu parameter...

CVE-2009-3313: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to 1 index.php and 2 editComments.php, and 3 allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action ...

CVE-2009-3334: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component aka JINC or comjinc component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php...

CVE-2009-3318: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Roland Breedveld Album comalbum component 1.14 for Joomla! allows remote attackers to access arbitrary directories and have unspecified other impact via a .. dot dot in the target parameter to index.php...

cour supreme 'index.php' SQL Injection & Local File Include Vulnerability

================================================= Discovered By: CrAzY CrAcKeR Email: CrAzYCrAcKeRathotmaildotcom ================================================ example:- http://www.example.in/index.php?p=affichedecision&id=-669 union select 1,2,3,4,5,6,loadfile'/etc/passwd',8+from+mysql.user...

CVE-2009-3310: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter in an AlbumSongs action...

CVE-2009-3311: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2009-3330: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in cP Creator 2.7.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tickets parameter in a support ticket action...

CVE-2009-3315: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field...

Joomla! Component com_facebook - SQL Injection

Joomla Component comfacebook SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 22, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9 CREW -=- INDONESIANCODER -=- Software Information +...

Joomla com_facebook SQL Injection

Exploit for unknown platform in category web applications ================================= Joomla comfacebook SQL Injection ================================= Software Information + Vendor : - + Download : http://joomlacode.org/gf/project/joomla-facebook/ + version : - + Vulnerability : SQL...