PT-2011-1893

Name of the Vulnerable Software and Affected Versions Prado Portal version 1.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the page parameter in the "index.php" file. Recommendations For Prado Portal version 1.2.0, consider restricting...

CVE-2010-4958: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2011-3394

SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2011-3394

SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page parameter...

PT-2011-4428

Name of the Vulnerable Software and Affected Versions MYRE Real Estate Software affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the findagent.php file via the page...

CVE-2011-3394: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2009-5089

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

Directory traversal

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

PT-2011-1338

Name of the Vulnerable Software and Affected Versions IdeaCart versions 0.02 through 0.02a Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the page parameter of the index.php file. Recommendations For IdeaCart versions 0.02 through 0.02a, consider...

CVE-2010-4814

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

PT-2011-1760

Name of the Vulnerable Software and Affected Versions Best Soft Inc. BSI Advance Hotel Booking System version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the page parameter in the "index1.php" file. Recommendations For Best Soft Inc. B...

CVE-2010-4814: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

PT-2011-1702

SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic quotes gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485. NOTE: the provenance of this information...

CVE-2010-4752: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485. NOTE: the provenance of this information i...

PT-2011-1680

Name of the Vulnerable Software and Affected Versions WebSCADA WS100 and WS200 versions affected versions not specified Easy Connect EC150 versions affected versions not specified Modbus RTU - TCP Gateway MB100 versions affected versions not specified Serial Ethernet Server SS100 versions affecte...

CuteNews (page) local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================== CuteNews page local File Inclusion Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

Sql injection

SQL injection vulnerability in list.php in BoutikOne 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-3479: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in list.php in BoutikOne 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-2856: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/currencies.php in osCSS 1.2.2, and probably earlier versions, allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Page parameter to 1 main/index.php, 2 members/index.php, 3 forum/index.php, 4 docs/index.php, and 5 announcements/index.php...