Sql injection

SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter...

CVE-2008-4753

CVE-2008-4753 : A SQL injection vulnerability exists in EditUrl.php of the AJ Square RSS Reader, exploitable via the url parameter to remotely execute arbitrary SQL commands. According to the NVD entry, the CVSS2 base score is 7.5 (high) with network attack vector, low attack complexity, and no a...

CVE-2008-4753

SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter...

CVE-2008-4753: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter...

Aj RSS Reader - 'url' SQL Injection

================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...

CVE-2008-4043

Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to 1 acme/article/comment.php and 2 prime/article/comment.php...

CVE-2008-4044

SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the artid parameter...

Sql injection

Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to 1 acme/article/comment.php and 2 prime/article/comment.php...

CVE-2008-4043

Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to 1 acme/article/comment.php and 2 prime/article/comment.php...

CVE-2008-4044

SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the artid parameter...

CVE-2008-4044

CVE-2008-4044 is an SQL injection vulnerability in AJ Square aj-hyip, specifically in article/readarticle.php, exploitable via the artid parameter to execute arbitrary SQL. The vulnerability is documented across multiple sources (NVD entry notes a remote, unauthenticated attack with high impact; ...

CVE-2008-4043

CVE-2008-4043 covers multiple SQL injection vulnerabilities in the AJ Square AJ HYIP Acme product, allowing remote attackers to modify or retrieve data via the artid parameter in two PHP endpoints: acme/article/comment.php and prime/article/comment.php. The bug is triggered through unsafely const...

CVE-2008-4043: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to 1 acme/article/comment.php and 2 prime/article/comment.php...

CVE-2008-4044: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the artid parameter...

Unfixed XSS vulnerability at www.armorysquareofsyracuse.com

Security researcher xylitol, has submitted on 19/07/2008 a cross-site-scripting XSS vulnerability affecting www.armorysquareofsyracuse.com, which at the time of submission ranked 1388022 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/07/200...

CVE-2008-2893

CVE-2008-2893 and CVE-2008-2532 describe SQL injection flaws in AJ Square AJ HYIP (aj-hyip). Affected software: AJ HYIP/AJ Square scripts (components cited include news.php and forum/topic_detail.php). Vulnerability: unsafely constructed SQL queries via the id parameter, enabling remote attackers...

CVE-2008-2893: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-2532...

AJ HYIP ACME (news.php id) Remote SQL Injection Vulnerability

No description provided by source. HYIP ACME Version SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...

CVE-2008-2532

The vulnerability CVE-2008-2532 affects the AJ Square AJ-HYIP (aka AJ HYIP Acme) forum component, specifically forum/topic_detail.php. The issue is a SQL injection in the id parameter that allows remote attackers to execute arbitrary SQL commands. This is caused by improper validation of the id i...

CVE-2008-2532: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in forum/topicdetail.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter...