CVE-2008-5877: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Phpclanwebsite aka PCW 1.23.3 Fix Pack 5 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php, 2 formid parameter to pcw/processforms.php, 3 pcwlogin and 4 pcwpass...

Sql injection

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

Sql injection

SQL injection vulnerability in the Top Hotel comtophotelmodule component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5859

CVE-2008-5859 describes an SQL injection in index.php of Constructr CMS 3.02.5 and earlier. When register_globals is enabled and magic_quotes_gpc is disabled, remote attackers can inject arbitrary SQL via the show_page parameter. The affected component is the CMS’s index.php; root cause is improp...

CVE-2008-5851

CVE-2008-5851 describes an SQL injection in the MyPHP Baseball Stats (MyPBS) application. The vulnerability is in index.php via the seasonID parameter, allowing remote attackers to alter the backend database by issuing arbitrary SQL. The NVD data lists a base score of 7.5 (HIGH) with NETWORK atta...

CVE-2008-5859

SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showpage parameter...

CVE-2008-5851: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

CVE-2008-5859: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showpage parameter...

Sql injection

Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to 1 previews.php and 2 reviews.php, and the 3 id parameter to index.php in a viewarticle action...

webSPELL <= 4.01.02 (id) Remote Edit Topics Vulnerability

No description provided by source. +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | webSPELL = 4.01.02 id Remote Edit Topics Vulnerability | Note | +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | discovered by athos -...

CVE-2008-5841: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to 1 previews.php and 2 reviews.php, and the 3 id parameter to index.php in a viewarticle action...

CVE-2008-5818

Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5817

CVE-2008-5817 affects Web Scribble Solutions webClassifieds 2005. Vulnerability is in index.php sign_in action where the (1) user and (2) password fields are unsafely processed, enabling SQL injection and remote execution of arbitrary SQL commands. Root cause: insufficient input validation/saniti...

CVE-2008-5818

CVE-2008-5818 describes a directory traversal in the PHP file index.php of the eDreamers eDContainer 2.22 application. When magic_quotes_gpc is disabled, a remote attacker can cause arbitrary local file inclusion/execution by supplying a path traversal sequence via the lg parameter (e.g., ..). Th...

CVE-2008-5818: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5817: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 password fields in a signin action...

CVE-2008-5811: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the PaxGallery compaxgallery component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gid parameter in a table action to index.php...

Sql injection

SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

eDContainer 2.22 Local File Inclusion

| | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | eDContainer v2.22 lg Local File Inclusion Vulnerability Script : http://www.mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/e/ed/edscontacts/eDContainerv222.zip...

CVE-2008-5783: Improper Authentication

admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...