1603 matches found
PAFileDB 1.1.32.1.13.03.1 - category.php?start Cross-Site Scripting
PAFileDB 1.1.32.1.13.03.1 - category.php?start Cross-Site Scripting source: https://www.securityfocus.com/bid/12788/info Multiple SQL injection and cross-site scripting vulnerabilities exist in paFileDB. These issues are reported to exist in the 'viewall.php' and 'category.php' scripts...
PAFileDB 1.1.32.1.13.03.1 - viewall.php?start SQL Injection
PAFileDB 1.1.32.1.13.03.1 - viewall.php?start SQL Injection source: https://www.securityfocus.com/bid/12788/info Multiple SQL injection and cross-site scripting vulnerabilities exist in paFileDB. These issues are reported to exist in the 'viewall.php' and 'category.php' scripts. Exploitation of...
PAFileDB 1.1.32.1.13.03.1 - category.php?start SQL Injection
PAFileDB 1.1.32.1.13.03.1 - category.php?start SQL Injection source: https://www.securityfocus.com/bid/12788/info Multiple SQL injection and cross-site scripting vulnerabilities exist in paFileDB. These issues are reported to exist in the 'viewall.php' and 'category.php' scripts. Exploitation of...
ProjectBB 0.4.5.1 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/12710/info ProjectBB is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to the application failing to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a...
OOApp Guestbook - Multiple HTML Injection Vulnerabilities
OOApp Guestbook - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/12647/info OOApp Guestbook is reportedly affected by multiple HTML injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input. The...
OOApp Guestbook - Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/12647/info OOApp Guestbook is reportedly affected by multiple HTML injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input. The attacker-supplied HTML and script code would be able to access...
iGeneric iG Shop 1.x - Multiple SQL Injections
source: https://www.securityfocus.com/bid/12627/info iGeneric iG Shop is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using them in SQL queries. Successful exploitation could result ...
CVE-2005-0537
Multiple SQL injection vulnerabilities in page.php for iGeneric iG Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the 1 cats, 2 lprice, or 3 uprice parameters...
CVE-2004-1668
Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the 1 pageid, 2 subid, or 3 catid parameters...
CVE-2004-1555
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the 1 keywords parameter to search.asp, 2 handle parameter to profile.asp, 3 txtUserHandle parameter to reg2.asp or 4 txtUserEmail parameter to forgot.asp...
CVE-2004-1629
Multiple SQL injection vulnerabilities in Dwcarticles 1.6 and earlier allow remote attackers to execute arbitrary SQL statements...
CVE-2005-0368
Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the 1 EntryID or 2 searchterm parameter to index.php, or 3 username parameter to authenticate.php...
CVE-2005-0271
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to showcat.php or 2 product parameter to addfav.php...
ITA Forum Multiple Scripts SQL Injection
The remote host is running ITA Forum, a forum software written in PHP. There is a SQL injection issue in the remote version of this software which may allow an attacker to execute arbitrary SQL statements on the remote host and to potentially overwrite arbitrary files on the remote system, by...
CVE-2005-0292
Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry phpGiftReg 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the 1 messageid, 2 shopper, 3 shopfor, or 4 itemid parameters...
MyBulletinBoard Multiple SQL Injection Vulnerabilities
Binary data 2485.prm...
CVE-2005-0271
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to showcat.php or 2 product parameter to addfav.php...
Various Vulnerabilities in OWL Intranet Engine
---------------------------------------------------------------------------- Various Vulnerabilities in OWL Intranet Engine ---------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basque Country...
CVE-2004-2202
Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the 1 catid or 2 subid parameters in adDetail.asp, or 2 the password parameter in the login form...