241 matches found
CVE-2009-3961
The CVE-2009-3961 entry describes an SQL injection in Super Serious Stats (aka superseriousstats) through user.php, exploitable via the uid parameter and related to an "incorrect regexp." The vulnerability affects versions before 1.1.2p1 and could allow remote attackers to execute arbitrary SQL c...
Sql injection
SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action...
CVE-2009-2924
Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the 1 UploadID parameter to videoint.php, and possibly the 2 catid parameter to catvideo.php and 3 uid parameter to cviewchannels.php...
Sql injection
Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the 1 UploadID parameter to videoint.php, and possibly the 2 catid parameter to catvideo.php and 3 uid parameter to cviewchannels.php...
Sql injection
SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a memberdetails action...
CVE-2008-3888
SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a memberdetails action...
Sql injection
SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execute arbitrary SQL commands via the UID parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to 1 friends.php, 2 seutubo.php, 3 album.php, 4 scrapbook.php, 5 index.php, or 6 tribes.php; or 7 the...
CVE-2008-3668
Multiple cross-site scripting XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to 1 friends.php, 2 seutubo.php, 3 album.php, 4 scrapbook.php, 5 index.php, or 6 tribes.php; or 7 the...
Sql injection
SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands via the UID parameter...
CVE-2008-3419
SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands via the UID parameter...
CVE-2008-3419
CVE-2008-3419 describes an SQL injection vulnerability in ugroups.php of the Youtuber Clone application, allowing remote attackers to execute arbitrary SQL commands through the UID parameter. The issue is documented across multiple sources (NVD/NVD mirror, CVE lists, and third-party advisories) w...
CVE-2008-3386
SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086...
Alstrasoft Video Share Enterprise 4.5.1 - 'UID' SQL Injection
|| | | Video Share Enterprise UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.alstrasoft.com/videoshare.htm | | DorK : Powered ...
CVE-2008-3089
CVE-2008-3089 describes an SQL injection vulnerability in Xpoze Pro 3.06 (Xpoze Pro CMS 2008), exploitable via the uid parameter in user.html . The root cause is improper input handling that allows arbitrary SQL execution by remote attackers. Impact per sources is partial confidentiality/integrit...
e107blog-sql.txt
::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend...
MiniNuke 2.1 - uid SQL Injection
MiniNuke 2.1 - uid SQL Injection MiniNuke v2.1 forum SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl:"members.asp?action" DORK 2 : allinurl: "members.asp"uid EXAMPLE= members.asp?action=memberdetails&uid=SQL exploi...
Sql injection
SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via the UID parameter...
CVE-2008-0089
CVE-2008-0089 is a SQL injection flaw in ClipShare’s uprofile.php that can be exploited remotely via the UID parameter to execute arbitrary SQL. Affected: ClipShare (uprofile.php). Root cause: improper input handling leading to SQL injection. Impact per NVD: partial confidentiality, integrity, an...