CVE-2008-6348: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...

CVE-2008-6361: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter...

BlogMan 0.45 Multiple Vulnerabilities

Salvatore "drosophila" Fresta Application: BlogMan http://sourceforge.net/projects/blogman/ Version: 0.45 Bug: Multiple SQL Injection Authentication Bypass Privilege Escalation Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta...

CVE-2008-6368: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start parameter...

CVE-2008-6359: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, and 3 message parameters...

CVE-2008-6330

SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action...

Sql injection

SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

Sql injection

SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL commands via the fpassword parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands via the fpassword parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6310

SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL commands via the fpassword parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6309

The CVE-2008-6309 entry describes an SQL injection vulnerability in the W3matter AskPert application, specifically in index.php where the f[password] parameter can be exploited to execute arbitrary SQL commands. This is a remote, unauthenticated vector with network attack potential and a base imp...

CVE-2008-6309

SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands via the fpassword parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6330: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action...

CVE-2008-6327: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312...

CVE-2008-6309: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands via the fpassword parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6310: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL commands via the fpassword parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6325: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

CVE-2008-6312: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.php and 2 rss.php; the query string after the image name in 3 photos/photo; the path parameter to 4 folder.php; page parameter and...