286 matches found
CVE-2008-2790
SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2790: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2277
CVE-2008-2277 describes an SQL injection in the web application module: a vulnerability in the file/function detail.php of the Feedback and Rating Script 1.0 . The flaw allows remote attackers to inject arbitrary SQL through the listingid parameter, potentially compromising database contents and ...
CVE-2008-2277: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary SQL commands via the listingid parameter...
XOOPS Module Recipe (detail.php id) SQL Injection Vulnerability
No description provided by source. XOOPS Project-RecetteRecipe2.2 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MA脻L : [email protected] DORK 1 : allinurl :"modules/recipe" EXPLOIT :...
XOOPS Module Recipe (detail.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== XOOPS Module Recipe detail.php id SQL Injection Vulnerability =============================================================== XOOPS Project-RecetteRecipe2.2 SQL Injection...
mcGallery 1.1 - detail.php?lang Cross-Site Scripting
mcGallery 1.1 - detail.php?lang Cross-Site Scripting source: https://www.securityfocus.com/bid/28587/info mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...
CVE-2008-1177: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in shop/detail.php in Affiliate Market affmarket 0.1 BETA allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...
CVE-2008-0776
SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...
ITechBids 6.0 (detail.php item_id) SQL Injection Vulnerability
No description provided by source. ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...
CVE-2008-0776
SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...
CVE-2008-0776: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...
itechbids60-sql.txt
ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...
ITechBids 6.0 - item_id SQL Injection
ITechBids 6.0 - itemid SQL Injection ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...
ITechBids 6.0 (detail.php item_id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== ITechBids 6.0 detail.php itemid SQL Injection Vulnerability ============================================================== ITechBids v.6.0 Gold Edition Sql Injection Exploit...
CVE-2008-0649: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.php in Astanda Directory Project ADP 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the linkid parameter...
Astanda Directory Project 1.2 (link_id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Astanda Directory Project 1.2 linkid SQL Injection Vulnerability ===================================================================...
CVE-2007-5430: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the p parameter to main.php in the Content Management System, 2 the id parameter in a sto cmd action to shop.php in the Merchant subsystem, or the 3 course or 4 provider parameter t...
Scott Manktelow Design Stride 1.0 Courses - 'detail.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/26036/info Stride 1.0 Courses is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...