saphp "add.php" forumid Parameter SQL Injection

=========================================== Discovered By: C.B.B.L CrAzY CrAcKeR ,Breeeeh ,BoNy-m ,LiNuXrOOt =========================================== Search:- powered by: saphp Example:- story/add.php?forumid=SQL Injection ===========================================...

CVE-2006-3769

Multiple cross-site scripting XSS vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pass and 2 pass2 parameters in a add.php or the 3 id parameter in b members/index.php...

CVE-2006-3769: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pass and 2 pass2 parameters in a add.php or the 3 id parameter in b members/index.php...

CVE-2006-3349

CVE-2006-3349: The connected sources confirm multiple SQL injection vulnerabilities in SmS Script, exploitable remotely via the CatID parameter in cat.php and add.php. The NVD entry documents the impact as arbitrary SQL execution with partial confidentiality/integrity/availability effects (CVSS v...

CVE-2006-3349: Undefined Security Weakness

Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the CatID parameter in 1 cat.php and 2 add.php...

CVE-2006-2987

Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...

CVE-2006-2987

Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...

CVE-2006-2957: Undefined Security Weakness

Cross-site scripting XSS vulnerability in i.List 1.5 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the banurl parameter to add.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2956: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchword parameter to search.php or 2 siteurl parameter to add.php...

CVE-2006-2835: Undefined Security Weakness

SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 forumid parameter in add.php and 2 lessid parameter in show.php...

CVE-2006-2536: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 "Search" term parameter in index.php and 2 "Add a Site" add.php fields...

CVE-2006-2281

X-Scripts X-Poll (xpoll) 2.30 is affected by an RCE via admin/images/add.php: an attacker can upload a PHP file and access it remotely. The underlying issue is improper file upload handling that allows execution of arbitrary PHP code. This affects the product as described in CVE-2006-2281 and is ...

CVE-2006-2281: Improper Control of Generation of Code

X-Scripts X-Poll xpoll 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to upload a PHP file, then access it...

Cross site scripting

Cross-site scripting XSS vulnerability in add.php in Hinton Design phphd 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2006-0609

CVE-2006-0609 : The vulnerability affects Hinton Design’s phphd 1.0, specifically the add.php script, where a Cross‑Site Scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Multiple independent sources (NVD entry, eVuln/SEC references, and Pack...

CVE-2006-0609: Undefined Security Weakness

Cross-site scripting XSS vulnerability in add.php in Hinton Design phphd 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-4555: Undefined Security Weakness

Cross-site scripting XSS vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 ENTERARTICLETITLE, 2 SPECIFYZONE, 3 ENTERARTICLEHEADER, and 4 ENTERARTICLEBODY indices in the language array parameter...

CVE-2005-4225

Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands via 1 the category parameter in add.php, 2 the catdesc parameter in addcat.php, 3 the level and user parameters in adduser.php, 4 the postid parameter in...

CVE-2005-4225: Undefined Security Weakness

Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands via 1 the category parameter in add.php, 2 the catdesc parameter in addcat.php, 3 the level and user parameters in adduser.php, 4 the postid parameter in...

CVE-2005-3363: Undefined Security Weakness

SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in 1 showcat.php and 2 add.php...