1211 matches found
Sql injection
SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1978
SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...
CVE-2007-1978
SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...
Fedora Core 5 : libXfont-1.2.8-1.fc5 (2007-422)
Fri Apr 6 2007 Adam Jackson 1.2.8-1 - libXfont 1.2.8. - Wed Jan 17 2007 Kristian Hagsberg 1.2.6-2 - Add built-in-scalable.patch to prevent crash when trying to scale built-in bitmap fonts. - Fri Jan 5 2007 Adam Jackson 1.2.6-1 - Update to 1.2.6 - Fri Dec 1 2006 Adam Jackson 1.2.5-1 - Update to...
Fedora Core 6 : libXfont-1.2.8-1.fc6 (2007-423)
Fri Apr 6 2007 Adam Jackson 1.2.8-1 - libXfont 1.2.8. - Wed Jan 17 2007 Kristian Hagsberg 1.2.6-2 - Add built-in-scalable.patch to prevent crash when trying to scale built-in bitmap fonts. - Fri Jan 5 2007 Adam Jackson 1.2.6-1 - Update to 1.2.6 - Fri Dec 1 2006 Adam Jackson 1.2.5-1 - Update to...
Sql injection
SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, different vectors than CVE-2006-3341...
Sql injection
SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-0377...
CVE-2007-1816
SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1815
SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
PHP-Fusion Module topliste 1.0 - cid SQL Injection
PHP-Fusion Module topliste 1.0 - cid SQL Injection -------------------------------- PHP-FUSION topliste Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron - unique xoron.biz -------------------------------- Exploit:...
PHP-Fusion Module topliste 1.0 - 'cid' SQL Injection
-------------------------------- PHP-FUSION topliste Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron - unique xoron.biz -------------------------------- Exploit:...
Important: XFree86 security update
4.3.0-115.EL.0.2 - Change Patch - needs to be -p0 not -p1 4.3.0-115.EL.0.1 - Add oracle detection to Imake. 4.3.0-115.EL - Add xorg-x11-6.8.2-sorted-xkbcomp-dirs.patch to fix rpmdiff multilib failure. 4.3.0-114.EL - Add xorg-x11-server-CVE-2006-6101.patch 218870 4.3.0-113.EL - Fix for CID font...
CVE-2006-6873
Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via 1 the did parameter in a a viewdisk operation diskusi mod, or the 2 cid parameter in a b viewlink katalog mod or b viewcat diskusi mod operation...
CVE-2006-6208
Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the 1 ADID, 2 catid, 3 subid, and 4 adid parameters to a ad.asp, the 5 cid parameter to b dircat.asp, and the 6 sid parameter to c dirSub.asp...
Important xorg-x11 security update
6.8.2-1.EL.13.37.2.1 - Add oracle detection to Imake and xprint 6.8.2-1.EL.13.37.2 - Fix for CID font parser integer overflows. CVE-2006-3470, 204548 - Remove withalternateprojectroot macros...
Enthrallweb eClassifieds - dircat.asp?cid SQL Injection
Enthrallweb eClassifieds - dircat.asp?cid SQL Injection source: https://www.securityfocus.com/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...
CVE-2006-5899
PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and...
CVE-2006-5899
PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and...
CVE-2006-5899
The CVE-2006-5899 issue is a PHP remote file inclusion in @cid stats 2.3 via the repertoire parameter of install.php3, enabling remote code execution. The root cause is the presence of install.php3 that can be invoked with a URL parameter to include arbitrary PHP code. The notes in sources indica...