CVE-2008-5636

CVE-2008-5636: SQL injection in Lito Lite CMS (cate.php) when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL via the cid parameter due to insufficient input sanitization in that parameter. Exploitation details are not provided in the connected docu...

Sql injection

SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5559

CVE-2008-5559 describes a SQL injection vulnerability in the sendcard.cfm component of PostEcards. An attacker can exploit the cid parameter to execute arbitrary SQL commands on the backend database. The NVD entry (CVSSv2 base score 7.5, HIGH) indicates network access with low attack complexity a...

Sql injection

SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5496

SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

bcoos 1.0.13 (viewcat.php cid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== bcoos 1.0.13 viewcat.php cid Remote SQL Injection Exploit =========================================================== !/usr/bin/perl -w ===========================================...

Sql injection

SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-4599

SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-4599

SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-4458

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action...

Sql injection

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action...

Gentoo Security Advisory GLSA 200609-07 (libxfont)

The remote host is missing updates announced in advisory GLSA 200609-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-4144

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

phsBlog 0.2 - Bypass SQL Injection Filtering

phsBlog 0.2 - Bypass SQL Injection Filtering !/usr/bin/perl ---------------------------------------------------------------- Script : PhsBlog v0.2 Type : Bypass Sql injection Filtering Exploit Method : GET Risk : High ---------------------------------------------------------------- Discovered by ...

Sql injection

SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3672...

CVE-2008-3672

SQL injection vulnerability in showcategory.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3673. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2008-3673

SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3672...

CVE-2008-3672

SQL injection vulnerability in showcategory.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3673. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

Sql injection

SQL injection vulnerability in the nBill comnetinvoice component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in an orders action to index.php. NOTE: some of these details are obtained from third party information...