EUVD-2006-1686

Malware in sbrugna...

01ACP 跨站脚本漏洞

01ACP is a central administration area for all modules of 01-Scripts.de by Michael Individual Developer. A cross-site scripting vulnerability exists in 01ACP 01-Artikelsystem, which originates from an unknown function in the file 01article.php. Manipulation of the parameter $SERVER PHPSELF result...

artikelkesehatan99.com XSS vulnerability

Open Bug Bounty ID: OBB-717961 Description| Value ---|--- Affected Website:| artikelkesehatan99.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Artikel CMS Cross Site Scripting

Cross Site Scripting on Artikel CMS Risk: Low CWE number: CWE-79 Date: 19/05/2014 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php?action=xss PoC: -Target: www.pontonmade.com -Vuln. File:...

CVE-2011-5111

Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to 1 the data module in alumni.php; or the 2 lihbuku, 3 artikel, 4 album, or 5 berita module in index.php...

Sql injection

Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to 1 the data module in alumni.php; or the 2 lihbuku, 3 artikel, 4 album, or 5 berita module in index.php...

CVE-2010-1924

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

Sql injection

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

CVE-2010-1924

CVE-2010-1924 describes an SQL injection in index.php of the Hi Web Wiesbaden Live Shopping Multi Portal System, exploitable via the artikel parameter to execute arbitrary SQL commands. The affected component is the index.php entry point; root cause is insecure handling of user-supplied input in ...

CVE-2010-1924

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

CVE-2010-1924: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...

CVE-2009-4780

Multiple cross-site scripting XSS vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter in a sitemap action, 2 the search parameter in a search action, 3 the taggingid parameter in a search action, 4 the...

CVE-2008-6806: Improper Input Validation

Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/artikel/...

Sql injection

Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d 1.9999 d allow remote attackers to execute arbitrary SQL commands via the 1 sprache parameter to index2.php and the 2 artikel parameter to index.php...

CVE-2008-4518: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d 1.9999 d allow remote attackers to execute arbitrary SQL commands via the 1 sprache parameter to index2.php and the 2 artikel parameter to index.php...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...

CVE-2007-6004

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...

Sql injection

Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL commands via the 1 group, 2 seite, and 3 id parameter, possibly involving the artikel functionality. NOTE: this vulnerability also allows...

CVE-2006-1685

Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL commands via the 1 group, 2 seite, and 3 id parameter, possibly involving the artikel functionality. NOTE: this vulnerability also allows...

CVE-2006-1685: Undefined Security Weakness

Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL commands via the 1 group, 2 seite, and 3 id parameter, possibly involving the artikel functionality. NOTE: this vulnerability also allows...