Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Keywords parameter to search.php and 2 SearchIndex parameter to browse.php...

CVE-2009-4985

SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute arbitrary SQL commands via the Go parameter...

CVE-2009-4985

CVE-2009-4985 describes an SQL injection in browse.php of Accessories Me PHP Affiliate Script 1.4, allowing remote attackers to execute arbitrary SQL via the Go parameter. Affected component is the browser page handling the Go input in the script. The underlying cause is improper input handling l...

CVE-2009-4797

SQL injection vulnerability in browse.php in JobHut 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pk parameter...

Sql injection

SQL injection vulnerability in browse.php in JobHut 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pk parameter...

CVE-2009-4797

CVE-2009-4797 describes an SQL injection in JobHut browse.php for versions 1.2 and earlier, exploitable via the pk parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands and may impact data confidentiality, integrity, and availability as described in the CVSS 2.0 v...

Sql injection

SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3967

SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3967

SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3967

The CVE-2009-3967 issue affects Ed Charkow SuperCharged Linking, specifically in browse.php where the id parameter is vulnerable to SQL injection. The underlying root cause is improper sanitization/execution of SQL, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is...

[ECHO_ADV_108$2009] JobHut <= 1.2 (pk) Remote Sql Injection Vulnerability

ECHOADV108$2009 ----------------------------------------------------------------------------------------- ECHOADV108$2009 JobHut = 1.2 pk Remote Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, 30 th...

CVE-2009-0965

CVE-2009-0965 concerns a SQL injection in Ganesha Digital Library (GDL) versions 4.0 and 4.2. The vulnerability affects functions/browse.php and can be triggered via the node parameter in a browse action to gdl.php, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists ...

GDL 4.x SQL Injection

Discovered by g4t3w4y \ jkthackerlinkatgmail.com transitory only http://jakartaweb.net/home/GDL-Digital-Library-SQL-Injection-Vulnerability.html : GDL v.4.x SQL Injection Vulnerability Script: GDL 4.0 | htdocs .gz GDL 4.0 | windows application GDL 4.2 | htdocs .zip Script site:...

GDL 4.x - node SQL Injection

GDL 4.x - node SQL Injection Discovered by g4t3w4y \ jkthackerlinkatgmail.com transitory only http://jakartaweb.net/home/GDL-Digital-Library-SQL-Injection-Vulnerability.html : GDL v.4.x SQL Injection Vulnerability Script: GDL 4.0 | htdocs .gz GDL 4.0 | windows application GDL 4.2 | htdocs .zip...

GDL 4.x - 'node' SQL Injection

Discovered by g4t3w4y \ jkthackerlinkatgmail.com transitory only http://jakartaweb.net/home/GDL-Digital-Library-SQL-Injection-Vulnerability.html : GDL v.4.x SQL Injection Vulnerability Script: GDL 4.0 | htdocs .gz GDL 4.0 | windows application GDL 4.2 | htdocs .zip Script site:...

Sql injection

SQL injection vulnerability in browse.php in TriO 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to browse.php or 2 the s parameter in an exhibitions action to detail.php...

CVE-2008-3418

CVE-2008-3418 is a SQL injection vulnerability in TriO 2.1 and earlier, actionable via the id parameter in browse.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, with impact on confidentiality, integrity, and availability (PARTIAL/PARTIAL/PARTIAL). CVSSv2 base sc...

CVE-2008-3418

SQL injection vulnerability in browse.php in TriO 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

trio-sql.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl TriO = 2.1 Remote SQL Injection Vulnerability Script: "TriO, iO's new web-based module, enables you to quickly, easily, and securel...