CVE-2007-5220: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters...

Unfixed Redirect vulnerability at www.karangturi.org

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting www.karangturi.org, which at the time of submission ranked 2527778 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixe...

CVE-2007-4845: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow remote attackers to execute arbitrary SQL commands via the 1 dlid or 2 cid parameter...

CVE-2007-4597: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to execute arbitrary SQL commands via the scid parameter in a searchlist action, a different vector than CVE-2007-2549...

Sql injection

SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php...

CVE-2007-4183: Undefined Security Weakness

SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php...

Sql injection

Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...

CVE-2007-3627

Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...

CVE-2007-3627: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...

CVE-2007-3293: Undefined Security Weakness

SQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-3156: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in pamlogin.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 message, or 3 question parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2737: Undefined Security Weakness

SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-2427: Undefined Security Weakness

SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-2373

SQL injection vulnerability in viewcat.php in the WF-Links wflinks 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-2370: Undefined Security Weakness

SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a jobsview action. NOTE: the module name was originally reported as Job Listings...

CVE-2007-2373: Undefined Security Weakness

SQL injection vulnerability in viewcat.php in the WF-Links wflinks 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-2107: Undefined Security Weakness

SQL injection vulnerability in visit.php in the Rha7 Downloads rha7downloads 1.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-1960. NOTE: the provenance of this information is unknown; the details are obtained...

Sql injection

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...