Sql injection

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPSite 0.0.1 and 0.0.7, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the checkuser parameter aka username field, or 2 the checkpass parameter aka password field, to...

CVE-2008-6226

SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter...

CVE-2008-6226

CVE-2008-6226 affects the Pre Projects PHP Auto Listings Script, specifically the moreinfo.php handler. The root cause is a SQL injection vulnerability in the itemno parameter when magic_quotes_gpc is disabled, allowing remote attackers to modify or execute arbitrary SQL commands. The available c...

CVE-2008-6165

SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...

Sql injection

SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...

Sql injection

SQL injection vulnerability in admin/index.php in w3bcms aka w3blabor CMS before 3.4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter aka Username field in a login action...

CVE-2008-6132

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via the startdate parameter...

CVE-2009-0570

Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...

CVE-2009-0535

CVE-2009-0535 describes a directory traversal in export.php of Thyme 1.3 and earlier, where, when register_globals is disabled, an attacker can read arbitrary files by supplying a .. in the export_to parameter. The NVD entry scores this as 7.5/10 (HIGH) with network access, low attack complexity,...

Sql injection

SQL injection vulnerability in plugins.php in BMForum 5.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tagname parameter...

Directory traversal

Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when registerglobals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the SERVERConfigFile parameter to admin/index.php...

CVE-2009-0325

CVE-2009-0325 affects Ninja Blog 4.8, specifically entries/index.php. The vulnerability is a directory traversal that allows reading arbitrary files by injecting .. into the cat parameter when magic_quotes_gpc is disabled. Public references in NVD and PRION/PT-2009-2988 describe the condition and...

Directory traversal

Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to check for the existence of arbitrary files via a .. dot dot in the page parameter...

CVE-2008-5965

The vulnerability CVE-2008-5965 affects LokiCMS 0.3.4 and earlier. A directory traversal flaw exists in index.php that, when magic_quotes_gpc is disabled, allows remote attackers to probe for the existence of arbitrary files by injecting .. into the page parameter. The NVD entry documents a MEDIU...

WFTPD Pro Server 3.30.0.1 (pre auth) Multiple Remote Denial of Service Vulnerabilities

Summary Professional FTP server for Windows NT / 2000 / XP / 2003. Description WFTPD Pro Server 3.30.0.1 suffers from multiple remote vulnerabilities which resolves in denial of service. Several commands are vulnerable including: LIST, MLST, NLST, NLST -al, STAT and maybe more. This issue is...

CVE-2008-5954

CVE-2008-5954 describes an SQL injection vulnerability in the KTP Computer Customer Database (KTPCCD) CMS. When magic_quotes_gpc is disabled, remote attackers can inject SQL via the lname parameter in a login action to an unspecified component, potentially compromising data. The available documen...

CVE-2008-5952

SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI...

Sql injection

SQL injection vulnerability in cate.php in Lito Lite CMS, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5604

Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

Sql injection

SQL injection vulnerability in findoffice.php in Check Up New Generation aka Check New 4.52, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...