CVE-2009-3148: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 calendar.php, 2 news.php, and 3 links.php; and the 4 assignmentid parameter to assignments.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to 1 news.php and 2 partneralle.php...

CVE-2009-3057: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to 1 news.php and 2 partneralle.php...

Beex 3 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Beex 3 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.aom-software.de/beexstart.php Greetings : Mizoz,...

BandCMS 0.10 SQL Injection

\ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + BandCMS v0.10 news.php Milti SQL Injection Vulnerabilities + Vendor : http://rockband.sourceforge.net/ + Exploit : Affix + Dork : "Powered by Rock Band CMS 0.10" + Greetz : Mad-Hatter,...

BandCMS 0.10 news.php Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ BandCMS 0.10 news.php Multiple SQL Injection Vulnerabilities ============================================================ + BandCMS v0.10 news.php Milti SQL Injection...

Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (1)

\ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + BandCMS v0.10 news.php Milti SQL Injection Vulnerabilities + Vendor : http://rockband.sourceforge.net/ + Exploit : Affix + Dork : "Powered by Rock Band CMS 0.10" + Greetz : Mad-Hatter,...

Rock Band CMS 0.10 - news.php Multiple SQL Injections (1)

Rock Band CMS 0.10 - news.php Multiple SQL Injections 1 \ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + BandCMS v0.10 news.php Milti SQL Injection Vulnerabilities + Vendor : http://rockband.sourceforge.net/ + Exploit : Affix + Dork :...

BandCMS 0.10 news.php Multiple SQL Injection Vulnerabilities

No description provided by source. \ / /| | | | \ | | | | | | \ | | | | | | \ \ | | \ | | | | \ | | \ \ | | | \ | |/ / |/ http://root-the.net + BandCMS v0.10 news.php Milti SQL Injection Vulnerabilities + Vendor : http://rockband.sourceforge.net/ + Exploit : Affix [email protected] + Dork :...

CVE-2008-7120

SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter...

Sql injection

SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter...

CVE-2008-7120: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter...

Unfixed XSS vulnerability at www.rdsm.fr

Security researcher DeAr EviL, has submitted on 07/11/2009 a cross-site-scripting XSS vulnerability affecting www.rdsm.fr, which at the time of submission ranked 27343135 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is current...

PHPWIND & DISCUZ! CSRF vulnerability-vulnerability warning-the black bar safety net

PHPWIND & DISCUZ! CSRF vulnerability affects versions: Discuz! 6.0.0 & 6.1.0 & 7.0.0 PHPWIND 6.0 & 6.3 & 7.0 Vulnerability description: PHPWIND & DISCUZ! The presence of CSRF vulnerabilities, triggering PHPWIND & DISCUZ! CSRF WORM! ... d/b31e4d2e6270c384 reference ... d/b31e4d2e6270c384 Safety...

CVE-2008-6425

CVE-2008-6425 concerns ComicShout 2.8, where the News.php news_id parameter is vulnerable to SQL injection. OpenVAS notes the issue arises because user data is not sufficiently sanitized before being used in SQL queries, enabling a remote attacker to manipulate or view data. Connected sources als...

CVE-2008-6425

SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via the newsid parameter, a different vector than CVE-2008-2456...

CVE-2008-6425: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via the newsid parameter, a different vector than CVE-2008-2456...

Sql injection

SQL injection vulnerability in news.php in RSS Simple News RSSSN, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2008-6333: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in RSS Simple News RSSSN, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2009-0705: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter...