EUVD-2006-3571

Malware in sbrugna...

CVE-2012-5342

Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...

Sql injection

Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...

CVE-2012-5342: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...

PT-2012-5937

Name of the Vulnerable Software and Affected Versions SenseSites CommonSense CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting SQL injection vulnerabilities via the id parameter in several API...

SenseSites CommonSense CMS - article.php?id SQL Injection

SenseSites CommonSense CMS - article.php?id SQL Injection source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

SenseSites CommonSense CMS - special.php?id SQL Injection

SenseSites CommonSense CMS - special.php?id SQL Injection source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

SenseSites CommonSense CMS - 'special.php?id' SQL Injection

source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

CVE-2010-5037

SenseSites CommonSense CMS is affected by a SQL injection flaw in article.php via the article_id parameter. The underlying issue is unsanitized input allowing arbitrary SQL execution. This vulnerability is documented with CVSSv2 base score 7.5 (HIGH) and network attack vector with low complexity ...

PT-2011-1972

Name of the Vulnerable Software and Affected Versions SenseSites CommonSense CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the article id parameter in the "article.php" file. Recommendations At the moment,...

CVE-2010-5037: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

CVE-2006-3576

The CVE-2006-3576 entry describes a SQL injection in SenseSites CommonSense CMS 5.0, exploitable via the Date parameter in search.php. Affected component: search.php within CommonSense CMS 5.0. Root cause: improper handling of user-supplied input (Date parameter) leading to arbitrary SQL executio...

CVE-2006-3576: Undefined Security Weakness

SQL injection vulnerability in search.php in SenseSites CommonSense CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the Date parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...