594 matches found
CVE-2008-4044
SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the artid parameter...
CVE-2008-4043
Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to 1 acme/article/comment.php and 2 prime/article/comment.php...
CVE-2008-4043: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to 1 acme/article/comment.php and 2 prime/article/comment.php...
CVE-2008-4044: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the artid parameter...
Unfixed XSS vulnerability at www.armorysquareofsyracuse.com
Security researcher xylitol, has submitted on 19/07/2008 a cross-site-scripting XSS vulnerability affecting www.armorysquareofsyracuse.com, which at the time of submission ranked 1388022 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/07/200...
CVE-2008-2893
CVE-2008-2893 and CVE-2008-2532 describe SQL injection flaws in AJ Square AJ HYIP (aj-hyip). Affected software: AJ HYIP/AJ Square scripts (components cited include news.php and forum/topic_detail.php). Vulnerability: unsafely constructed SQL queries via the id parameter, enabling remote attackers...
CVE-2008-2893: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in news.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-2532...
AJ HYIP ACME (news.php id) Remote SQL Injection Vulnerability
No description provided by source. HYIP ACME Version SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...
CVE-2008-2532
The vulnerability CVE-2008-2532 affects the AJ Square AJ-HYIP (aka AJ HYIP Acme) forum component, specifically forum/topic_detail.php. The issue is a SQL injection in the id parameter that allows remote attackers to execute arbitrary SQL commands. This is caused by improper validation of the id i...
CVE-2008-2532: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in forum/topicdetail.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter...
ReadDesign checker
This plugin checks for ReadDesign vulns on the remote web server. For more information, see: https://www.appsecinc.com/Policy/PolicyCheck1520.html OpenVAS Vulnerability Test $Id: readdesigncheck.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: ReadDesign checker Authors: Hemil Shah Copyright:...
DefaultNav checker
This plugin checks for DefaultNav vulnerabilities on the remote web server See the references for more information. SPDX-FileCopyrightText: 2005 Net-Square Solutions Pvt Ltd. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2004-1621: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of 1 computed for display, 2...
PT-2004-2528 · Ibm · Ibm Domino +1
Name of the Vulnerable Software and Affected Versions: IBM Lotus Notes versions prior to R6 IBM Domino versions prior to R6 Description: A cross-site scripting XSS issue allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of computed for...