Sql injection

SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL commands via the sid parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6642

SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL commands via the sid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in buyerdetail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the 1 sid and 2 cid parameters...

Directory traversal

Directory traversal vulnerability in Yerba SACphp 6.3 allows remote attackers to read arbitrary files, and possibly have other impact, via directory traversal sequences in the mod field contained in the base64-encoded SID parameter to an unspecified component. NOTE: the provenance of this...

CVE-2008-4369

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Sql injection

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in print.php in myPHPNuke MPN before 1.8.88rc2 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

Sql injection

SQL injection vulnerability in print.php in myPHPNuke MPN before 1.8.88rc2 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4051

Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in redirect.do in Xitex WebContent M1 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Unfixed XSS vulnerability at www.musicload.de

Security researcher Venom23, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting www.musicload.de, which at the time of submission ranked 12906 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is current...

CVE-2006-5416

Cross-site scripting XSS vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

F5 Firepass crossite scripting

my.acctab.php3 sid parameter crossite scripting...

Sql injection

SQL injection vulnerability in misc.php in Woltlab Burning Board WBB 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the 1 query string, 2 SID parameter, or 3 ilang parameter...

CVE-2006-1980

Cross-site scripting XSS vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the 1 query string, 2 SID parameter, or 3 ilang parameter...

CVE-2006-1980

CVE-2006-1980 is an XSS vulnerability in W2B Online Banking. The vulnerability allows remote attackers to inject arbitrary script via (1) query string, (2) SID parameter, or (3) ilang parameter. The NVD entry reports a CVSS v2.0 base score of 2.6 (low) with Network attack vector, high attack comp...

Sql injection

Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to 1 friend.php or 2 article.php...

phpTourney 0.8.0 SQL-Injection

Продукт: phpTourney Версия: 0.8.0 Уязвимость: Не проверяется параметр sid на наличие SQL-команд Пример: http://any.site.org/folder/?sid=220UNION20SELECT20NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL/ Контакты: http://adz.void.ru/ [email protected]...