541 matches found
CVE-2006-6080: Undefined Security Weakness
Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the 1 catID or 2 editorID parameter...
CVE-2006-6094: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the 1 catID parameter to activeNewscategories.asp, the 2 articleID parameter to activeNewscomments.asp, or the 3 query parameter to activenewssearch.asp...
PT-2006-6622 · Infinicart · Infinicart
Name of the Vulnerable Software and Affected Versions: INFINICART affected versions not specified Description: The issue concerns SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands. This is possible via several parameters in different ASP files,...
CVE-2006-5957: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the 1 groupid parameter in a browsegroup.asp, 2 productid parameter in b addedtocart.asp, and 3 catid and 4 subid parameter in c browsesubcat.asp. NOTE: the vendor has disputed this...
CVE-2006-5880
SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-5880: Undefined Security Weakness
SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-5830: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topid, 2 forid, and 3 catid parameters to code/cpforumview.php; 4 choosedlanguage parameter to cpdpage.php; 5 orderdir...
CVE-2006-5208: Undefined Security Weakness
Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via 1 the catidsearch parameter in search.php and 2 the catid parameter in index.php...
CVE-2006-4967
Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...
CVE-2006-4967
Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...
CVE-2006-4967: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...
SQL injection Seir Anphin v666 Community Management System
CR Advisory1 programm: Seir Anphin v666 Community Management System bug: SQL injection home page: www.comeplaydying.com bug found: 27.07.2006 discovered by CR www.svt.nukleon.us ! Details ! ============================================================================================ index.php...
CVE-2006-3349
Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the CatID parameter in 1 cat.php and 2 add.php...
CVE-2006-3349
CVE-2006-3349: The connected sources confirm multiple SQL injection vulnerabilities in SmS Script, exploitable remotely via the CatID parameter in cat.php and add.php. The NVD entry documents the impact as arbitrary SQL execution with partial confidentiality/integrity/availability effects (CVSS v...
CVE-2006-3349: Undefined Security Weakness
Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the CatID parameter in 1 cat.php and 2 add.php...
CVE-2006-3236: Undefined Security Weakness
Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a index.php or b printarticle.php, and the 2 catid parameter in index.php...
CVE-2006-3263: Undefined Security Weakness
SQL injection vulnerability in the Weblinks module weblinks.php in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2973: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid and 2 cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c...
