15330 matches found
CVE-2011-1055
SQL injection vulnerability in api/icemedia.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the session.userid parameter to media.cfm...
CVE-2011-1048
SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
Multiple SQL injection vulnerabilities in VastHTML Forum Server aka ForumPress plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 searchmax parameter in a search action to index.php, which is not properly handled by wpf.class.php, 2 id paramete...
Sql injection
SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2011-1048
SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2011-1055
SQL injection vulnerability in api/icemedia.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the session.userid parameter to media.cfm...
Joomla! com_maianmedia Component 'cat' Parameter SQL Injection Vulnerability
This host is installed with Joomla! with Maian Media Silver Component and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamaianmediacompsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla! commaianmedia Component 'cat' Parameter SQL Injection...
Sql injection
SQL injection vulnerability in the Maian Media Silver commaianmedia component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a music action to index.php...
Sql injection
SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter...
Sql injection
Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to 1 multi/city.asp in the Multi Agent System and 2 resulttype.asp in the Single Agent System...
Sql injection
SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ECOID parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4737
SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter...
CVE-2010-4735: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in shoppingcart.asp in Ecommercemax Solutions Digital-goods seller DGS 1.5 allows remote attackers to execute arbitrary SQL commands via the d parameter...
PT-2011-1687
Name of the Vulnerable Software and Affected Versions HotWebScripts HotWeb Rentals affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the PropResort parameter in the resorts.asp file. Recommendations At t...
PT-2011-1688
Name of the Vulnerable Software and Affected Versions Rae Media INC Real Estate Single and Multi Agent System version 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the probe parameter to two specific API endpoints: "multi/city.asp" in th...
Multiple Vulnerabilities in IWantOneButton WordPress Plugin
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in IWantOneButton WordPress Plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in IWantOneButton WordPress Plugin The vulnerability...
CVE-2010-4721
SQL injection vulnerability in news.php in Immo Makler allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in news.php in Immo Makler allows remote attackers to execute arbitrary SQL commands via the id parameter...
SQL Injection Vulnerabilities in Seo Panel
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Seo Panel which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in Seo Panel 1.1 The vulnerability exists due to input sanitation errors in the "langcode" parameter in...