CVE-2009-3972

SQL injection vulnerability in the Q-Proje Siirler Bileseni comsiirler component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php...

CVE-2009-3972: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Q-Proje Siirler Bileseni comsiirler component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php...

Q&A: Bruce Schneier

CNet’s Elinor Mills has produced an interesting Q&A interview with security guru Bruce Schneier where the cryptographer pokes fun at the National Cyber Security Month, talks about his background in crypto and working for the U.S. Defense Department, and says he fears privacy invasion more from...

AdaptBB <= 1.0 xss

Exploit for unknown platform in category web applications ================== AdaptBB = 1.0 xss ================== | D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' '--''--''--' =...

SuSE9 Security Update : ethereal (YOU Patch Number 12323)

This update fixes problems that could crash wireshark when processing compressed data CVE-2008-3933 and Q.931 packets. CVE-2008-4685 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2009-3061

SQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-3061

SQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-3061

The CVE-2009-3061 entry concerns a SQL injection in lesson.php of Alqatari Q R Script 1.0, exploitable via the id parameter to execute arbitrary SQL commands. Affected component: lesson.php in Alqatari Q R Script 1.0; root cause is improper input handling allowing SQL command injection. Public re...

CVE-2009-3061: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-7059

SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...

CVE-2008-7059: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...

CVE-2009-2930

Cross-site scripting XSS vulnerability in the Search feature in elka CMS aka Elkapax allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

CVE-2009-2930: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Search feature in elka CMS aka Elkapax allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

Elkapax CMS Cross Site Scripting

================= IUT-CERT ================= Title: Elkapax CMS Multiple Vulnerabilities Vendor: www.elkapax.com Type: Input.Validation.Vulnerability Cross Site Scripting Fix: N/A ================== nsec.ir ================= Description: ------------------ Elkapax is a CMS producer in Iran. Searc...

CVE-2008-6879

Cross-site scripting XSS vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action...

CVE-2008-6879: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action...

CVE-2009-2595: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a ProductSearch action...

CVE-2009-2571: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the URI, 2 the q parameter, 3 the nick parameter, or 4 the nick parameter in a bantest action...

CVE-2009-2302: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected...