10 matches found
CVE-2020-18215: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the 1 adid, 2 menuid, and 3 cashoutid parameters, which could let a remote malicious user execute arbitrary code...
CVE-2019-10262: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection issue was discovered in BlueCMS 1.6. The variable $adid is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes...
Enthrallweb eHomes homeDetail.asp AD_ID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploi...
CVE-2010-4920
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...
CVE-2010-4920
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...
CVE-2010-4920: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...
CVE-2008-5309
SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in the resendemail module to index.php...
CVE-2008-5309: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in the resendemail module to index.php...
Netartmedia Real Estate Portal 1.2 - 'ad_id' SQL Injection
Real Estate Portal v1.2 adid Remote SQL Injection Vulnerability Author: Hussin X Home :IQ-SecuriTY www.IQ-TY.com | TrYaG www.TrYaG.cc Mail : [email protected] script : http://www.netartmedia.net/realestate/ DorK : "Powered by Real Estate Portal" exploit :...
CVE-2006-6208
Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the 1 ADID, 2 catid, 3 subid, and 4 adid parameters to a ad.asp, the 5 cid parameter to b dircat.asp, and the 6 sid parameter to c dirSub.asp...