51 matches found
CVE-2007-1566: Undefined Security Weakness
SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL commands via the NewsID parameter. NOTE: this issue might be the same as CVE-2006-5954...
CVE-2006-5954
SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsID parameter...
CVE-2006-5954
SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsID parameter...
CVE-2006-5954: Undefined Security Weakness
SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsID parameter...
CVE-2006-5887
SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execute arbitrary SQL commands via the NewsID parameter...
CVE-2006-5887
The CVE-2006-5887 entry describes a SQL injection vulnerability in Dynamic Dataworx NuSchool 1.0, specifically in CampusNewsDetails.asp where the NewsID parameter can be exploited to execute arbitrary SQL commands remotely. This is the stated root cause and impact in the provided documents. The s...
Sql injection
SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2006-2879
SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2006-2879: Undefined Security Weakness
SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2006-1000
Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 newsid parameter to newsdetailsview.asp and 2 password parameter to login.asp...
CVE-2005-4075
Multiple cross-site scripting XSS vulnerabilities in index.cfm in CFNuke 4.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 newsid parameter in the news sector, and 3 cat parameter in the links sector...