302 matches found
CVE-2008-3089: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in user.html in Xpoze Pro 3.06 aka Xpoze Pro CMS 2008 allows remote attackers to execute arbitrary SQL commands via the uid parameter...
e107blog-sql.txt
::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend...
MiniNuke 2.1 - uid SQL Injection
MiniNuke 2.1 - uid SQL Injection MiniNuke v2.1 forum SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl:"members.asp?action" DORK 2 : allinurl: "members.asp"uid EXAMPLE= members.asp?action=memberdetails&uid=SQL exploi...
Sql injection
SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via the UID parameter...
CVE-2008-0089
CVE-2008-0089 is a SQL injection flaw in ClipShare’s uprofile.php that can be exploited remotely via the UID parameter to execute arbitrary SQL. Affected: ClipShare (uprofile.php). Root cause: improper input handling leading to SQL injection. Impact per NVD: partial confidentiality, integrity, an...
CVE-2008-0089
SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via the UID parameter...
CVE-2008-0089: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via the UID parameter...
CVE-2007-5692
Multiple cross-site scripting XSS vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter to integrator.php; 2 the token parameter in a New Password action, 3 the nidacl parameter in a Folder Properties action, or 4 the uid parameter...
CVE-2007-5692
Multiple cross-site scripting XSS vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter to integrator.php; 2 the token parameter in a New Password action, 3 the nidacl parameter in a Folder Properties action, or 4 the uid parameter...
CVE-2007-4087: Undefined Security Weakness
AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information the full path via 1 a ' quote character in the category parameter to viewvideo.php, or 2 an XSS sequence in the UID parameter to a uprofile.php, b channeldetail.php, c uvideos.php, d groupshome.php, or e...
CVE-2007-1817: Undefined Security Weakness
SQL injection vulnerability in index.php in the Lykos Reviews lykosreviews 1.00 module for Xoops allows remote attackers to execute arbitrary SQL commands via the uid parameter in a u action...
CVE-2007-0845: Undefined Security Weakness
admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...
CVE-2007-0600: Undefined Security Weakness
SQL injection vulnerability in newspage.asp in Martyn Kilbryde Newsposter Script aka makit news/blog poster 3 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter...
CVE-2006-4667
Multiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 uid parameter in a class/sessions.class.php, and the 2 timezoneoffset and 3 umode parameters in b class/xoopsuser.php...
CVE-2006-4667
CVE-2006-4667 concerns RunCMS 1.4.1, where multiple SQL injection flaws allow remote attackers to inject arbitrary SQL via (1) uid in class/sessions.class.php and (2) timezone_offset and (3) umode in class/xoopsuser.php. The NVD entry documents these specific parameters as the attack surface, wit...
CVE-2006-4590: Undefined Security Weakness
SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2006-4463. NOTE: the provenance of this information is unknown; the details are obtained...
CVE-2006-3182: Undefined Security Weakness
Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the uid parameter in the rss page...
CVE-2006-3182
Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the uid parameter in the rss page...
CVE-2006-2974
Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errCode and 2 uid parameter in a default.asp and 3 dname parameter in b /admin/dns.asp and c /additional/regdomaindone.asp...