CVE-2009-1038

Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 imageid parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the 2 user parameter in a modif action to admin/index.php...

CVE-2008-6501

Cross-site scripting XSS vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter...

Sql injection

SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands via the entryid parameter...

CVE-2008-6495

Cross-site scripting XSS vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter...

CVE-2009-1038: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 imageid parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the 2 user parameter in a modif action to admin/index.php...

CVE-2008-6501: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter...

CVE-2009-1023

CVE-2009-1023 affects phpComasy 0.9.1 through index.php:entry_id, enabling remote SQL injection that can modify or read database contents with Partial confidentiality, Integrity, and Availability impacts (CVSS v2 base 7.5). Connected sources confirm the vulnerability and parameter as entry_id, bu...

CVE-2009-1023

SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands via the entryid parameter...

CVE-2008-6495: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter...

CVE-2008-6492: Improper Input Validation

Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these...

CVE-2009-1023: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands via the entryid parameter...

CVE-2009-0968

SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2009-0968: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-6489: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in MyAlbum component commyalbum 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the album parameter to index.php...

CVE-2009-0969: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the actupdate action...

CVE-2008-6485

SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery allows remote attackers to execute arbitrary SQL commands via the ctg parameter...

Sql injection

SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the Admin field in a login action...

CVE-2008-6485

CVE-2008-6485 : The connected documents confirm a SQL injection in SoftComplex PHP Image Gallery, specifically in index.php via the ctg parameter. The root cause is unsafe SQL construction in the application, enabling remote attackers to execute arbitrary SQL commands with the potential for parti...

CVE-2008-6488

CVE-2008-6488 describes an SQL injection in the login action of the web application SoftComplex PHP Image Gallery 1.0 . The vulnerability exists in the login functionality, where the Admin field can be exploited to execute arbitrary SQL commands remotely. According to the NVD entry, the vulnerabi...