CVE-2008-6293: Undefined Security Weakness

admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the usernamecookie to "admin."...

CVE-2008-6294: Undefined Security Weakness

admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the usernamecookie cookie to "admin."...

CVE-2008-6295: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.php and 2 rss.php; the query string after the image name in 3 photos/photo; the path parameter to 4 folder.php; page parameter and...

Sql injection

Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the logmbr parameter aka login field or 2 the mdpmbr parameter aka pass or "Mot de passe" field. NOTE: some of these details are obtained from third party...

CVE-2008-6274

Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the logmbr parameter aka login field or 2 the mdpmbr parameter aka pass or "Mot de passe" field. NOTE: some of these details are obtained from third party...

CVE-2008-6282

SQL injection vulnerability in engine/users/userseditpub.inc in CMS Ortus 1.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the city parameter in a userseditpub action to index.php...

CVE-2008-6274

CVE-2008-6274: Multiple SQL injection vulnerabilities in index.php of FamilyProject 2.0 allow remote callers to inject SQL via logmbr (login) or mdpmbr (password) parameters. Root cause appears to be unsanitized user input in these fields; impacts include potential partial disclosure/integration/...

CVE-2008-6274

Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the logmbr parameter aka login field or 2 the mdpmbr parameter aka pass or "Mot de passe" field. NOTE: some of these details are obtained from third party...

CVE-2008-6281

SQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0737

Multiple cross-site scripting XSS vulnerabilities in the web-based installer config/index.php in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6272

Dragan Mitic Apoll web app (0.7 beta and 0.7.5) contains an SQL injection in admin/index.php. The vulnerability arises from insufficient input sanitization of the pass parameter, enabling remote attackers to manipulate SQL commands. Affected component: admin/index.php; vulnerable vector is user-s...

CVE-2008-6270

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the user parameter...

CVE-2008-6281: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6270: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the user parameter...

CVE-2008-6274: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the logmbr parameter aka login field or 2 the mdpmbr parameter aka pass or "Mot de passe" field. NOTE: some of these details are obtained from third party...

CVE-2008-6285: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP TV Portal 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2009-0737: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web-based installer config/index.php in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6272: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the pass parameter...

CVE-2008-6271: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in TBmnetCMS 1.0, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the content parameter...

CVE-2009-0728

SQL injection vulnerability in the MyeGallery module for MAXdev MDPro MD-Pro and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php...