1245 matches found
CVE-2009-0332
Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/edit.php, 2 admin/add.php, 3 lib/booksearch.php, and possibly other components...
Sql injection
Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/edit.php, 2 admin/add.php, 3 lib/booksearch.php, and possibly other components...
CVE-2009-0332
CVE-2009-0332 affects AV Book Library prior to 1.1, with multiple SQL injection flaws in components including admin/edit.php, admin/add.php, and lib/book_search.php. The root cause is unsanitized/unspecified parameters enabling remote attackers to execute arbitrary SQL commands. The CVE has a Hig...
CVE-2009-0332
Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/edit.php, 2 admin/add.php, 3 lib/booksearch.php, and possibly other components...
CVE-2009-0332: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/edit.php, 2 admin/add.php, 3 lib/booksearch.php, and possibly other components...
Mandrake Security Advisory MDVSA-2009:016 (xen)
The remote host is missing an update to xen announced via advisory MDVSA-2009:016. OpenVAS Vulnerability Test $Id: mdksa2009016.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:016 xen Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
faqmanager-sql.txt
+---------------------------------------------------------------------------------------+ | | | FAQ Manager 1.2 categorie.php catid Remote SQL Injection Vulnerability | | Bug found by cOndemned | | | | Script site : http://www.4yoursite.nl/scriptfaqmanager.php | | | | Greetz: ZaBeaTy, str0ke,...
Gentoo Security Advisory GLSA 200402-07 (clamav)
The remote host is missing updates announced in advisory GLSA 200402-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200402-07 (clamav)
The remote host is missing updates announced in advisory GLSA 200402-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Design/Logic Flaw
Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...
CVE-2007-4885
Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...
CVE-2007-4885
Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...
CVE-2007-4885: Undefined Security Weakness
Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...
CVE-2007-4885
CVE-2007-4885 affects Avnex AV MP3 Player. A user-assisted remote attacker can cause an application crash (DoS) by supplying a malformed .au file that triggers a divide-by-zero error. Multiple connected sources (NVD, Red Hat, CVE listings) confirm the impact as a denial-of-service condition due t...
Sql injection
Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script avtutorial 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 userid parameters, a different issue than CVE-2007-3630...
CVE-2007-3691
Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script avtutorial 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 userid parameters, a different issue than CVE-2007-3630...
CVE-2007-3691
Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script avtutorial 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 userid parameters, a different issue than CVE-2007-3630...
CVE-2007-3691
CVE-2007-3691 affects AV Tutorial Script (avtutorial) 1.0. The changePW.php file is vulnerable to SQL injection via the parameters (1) id and (2) userid when magic_quotes_gpc is disabled, enabling remote attackers to execute arbitrary SQL commands. This is a direct vulnerability in the applicatio...
CVE-2007-3691: Undefined Security Weakness
Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script avtutorial 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 userid parameters, a different issue than CVE-2007-3630...