Sql injection

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...

PT-2010-5343

Name of the Vulnerable Software and Affected Versions Energine versions prior to 2.3.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the SQL injection vulnerability in the index.php file via the NRGNSID cookie. Recommendations For...

CVE-2010-4186: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...

PT-2010-5344

Name of the Vulnerable Software and Affected Versions OnlineTechTools Online Work Order System OWOS Professional Edition version 2.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the password parameter in the "process.asp" file...

CVE-2010-4006

Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 namecondition or 2 namesearch parameter...

Sql injection

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033...

Sql injection

SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646...

CVE-2010-4006

Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 namecondition or 2 namesearch parameter...

CVE-2010-4152: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646...

PT-2010-5233

Name of the Vulnerable Software and Affected Versions WSN Links versions 5.0.x through 5.0.80 WSN Links versions 5.1.x through 5.1.50 WSN Links versions 6.0.x through 6.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the namecondition or...

CVE-2010-4144

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter...

Sql injection

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter...

Sql injection

SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

Multiple Vulnerabilities in CLANSPHERE

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CLANSPHERE which could be exploited to perform cross-site scripting, script insertion and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in CLANSPHERE The vulnerability exists due to input...

CVE-2010-4143

CVE-2010-4143 affects phpCheckZ 1.1.0 and is triggered in chart.php when magic_quotes_gpc is disabled. The vulnerability enables SQL injection via the id parameter, allowing remote attackers to execute arbitrary SQL commands. This is caused by improper input handling in the affected code path. Th...

CVE-2010-4143

SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2010-5319

Name of the Vulnerable Software and Affected Versions Pentasoft Avactis Shopping Cart versions 1.9.1 build 8356 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by sending a malicious User-Agent header to specific API endpoints, suc...

PT-2010-5316

Name of the Vulnerable Software and Affected Versions Kisisel Radyo Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the Id parameter in the radyo.asp file. Recommendations At the moment, there is no...

CVE-2010-0112

Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via 1 the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and...

Multiple Vulnerabilities in eoCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in eoCMS which could be exploited to perform script insertion and SQL injection attacks, gain access to sensitive information and compromise vulnerable system. 1 Script insertion vulnerability in eoCMS An input...