7400 matches found
CVE-2008-6796
SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter aka the Admin field or Username field...
CVE-2008-6798: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via 1 the us parameter aka the Username field or 2 the ps parameter aka the Password field...
CVE-2008-6796: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter aka the Admin field or Username field...
Community CMS 0.5 Multiple SQL Injection Vulnerabilities
No description provided by source. Salvatore "drosophila" Fresta + Application: Community CMS + Version: 0.5 + Website: http://sourceforge.net/projects/communitycms/ + Bugs: A Multiple SQL Injection + Exploitation: Remote + Dork: intext:"Powered by Community CMS" + Date: 30 Mar 2009 +...
Security projects aim for Google Summer of Code
By Robert Lemos, SecurityFocus A number of security-focused open-source projects have announced their participation as mentoring organizations in Google’s Summer of Code google.com. They include the NMap Project, the OpenSSH project and the Honeynet Project. Read the full article securityfocus.co...
Fedora Update for hsqldb FEDORA-2007-4119
Check for the Version of hsqldb OpenVAS Vulnerability Test Fedora Update for hsqldb FEDORA-2007-4119 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Sql injection
SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6226
SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter...
CVE-2008-6226
CVE-2008-6226 affects the Pre Projects PHP Auto Listings Script, specifically the moreinfo.php handler. The root cause is a SQL injection vulnerability in the itemno parameter when magic_quotes_gpc is disabled, allowing remote attackers to modify or execute arbitrary SQL commands. The available c...
CVE-2008-6226
SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter...
CVE-2008-6230
SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6230
CVE-2008-6230 affects the Pre Projects Pre Podcast Portal (Tour.php). The vulnerability is an SQL injection via the id parameter that enables remote attackers to execute arbitrary SQL commands. The NVD CVSSv2 base score is 7.5 (NETWORK, LOW attack complexity, NONE authentication, PARTIAL impacts ...
CVE-2008-6230: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6226: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter...
Fedora Update for trac FEDORA-2008-6830
Check for the Version of trac OpenVAS Vulnerability Test Fedora Update for trac FEDORA-2008-6830 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for bugzilla FEDORA-2008-3668
Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2008-3668 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2009-0328
ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...
CVE-2009-0324
CVE-2009-0324 describes multiple SQL injection vulnerabilities in BibCiter 1.4. The affected components are the PHP scripts reports/projects.php (parameter idp), reports/contacts.php (parameter idc), and reports/users.php (parameter idu). The root cause is unsanitized input leading to arbitrary S...
CVE-2009-0328
CVE-2009-0328 affects ROBS-PROJECTS Digital Sales IPN (also DS-IPN.NET/DS-IPN Paypal Shop). The issue is insufficient access control that allows remote attackers to directly download the database file (Database/Sales.mdb) from the web root, exposing user credentials. This has been captured in mul...
CVE-2009-0328
ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...