CVE-2009-0401

CVE-2009-0401 describes an SQL injection in browsecats.php of E-Php CMS, exploitable by remote attackers via the cid parameter to execute arbitrary SQL. The affected component is the browsecats.php module within E-Php CMS; root cause is improper input handling that allows SQL command injection. I...

CVE-2009-0401

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0401: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

E-PHP Scripts EShop SQL Injection

E-Php Scripts Eshop 'searchresults.php' SQL Injection Vulnerability Dicovered By: SaiedHacker Group: HackeranShiraz Security Team Web Address: www.HackeranShiraz.Com E-mail: [email protected] Exploit:...

E-PHP Scripts B2B Trading Marketplace XSS

E-Php Scripts B2B Trading Marketplace XSS Vulnerability Dicovered By: SaiedHacker Group: HackeranShiraz Security Team Web Address: www.HackeranShiraz.Com E-mail: [email protected] Exploits: http://Target/b2b/signin.php?errmsg=%3Cscript%3Ealert1;%3C/script%3E...

E-PHP B2B Trading Marketplace Script - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/33551/info E-Php B2B Trading Marketplace Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser o...

E-PHP CMS SQL Injection

E-PHP cms SQL Injection Vulnerability Dicovered By: SaiedHacker Group: HackeranShiraz Security Team Web Address: www.HackeranShiraz.Com E-mail: [email protected] Creator: http://ephpscripts.com Demo Exploit:...

Sql injection

SQL injection vulnerability in searchresults.php in E-Php Scripts E-Shop aka E-Php Shopping Cart Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5838

SQL injection vulnerability in searchresults.php in E-Php Scripts E-Shop aka E-Php Shopping Cart Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5838

SQL injection vulnerability in searchresults.php in E-Php Scripts E-Shop aka E-Php Shopping Cart Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5838

CVE-2008-5838 is a SQL injection vulnerability in the E-Php Scripts E-Shop Shopping Cart, affecting the search_results.php code path. The vulnerability allows remote attackers to inject arbitrary SQL via the cid parameter, potentially compromising data integrity and partial confidentiality. The N...

CVE-2008-5838: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in searchresults.php in E-Php Scripts E-Shop aka E-Php Shopping Cart Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-4458

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action...

Sql injection

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action...

CVE-2008-4458

The CVE-2008-4458 entry describes a SQL injection in the E-Php B2B Trading Marketplace Script, exploitable via the cid parameter in a product action. Affected component: listings.php. Root cause: unsanitized user input enabling arbitrary SQL execution. Impact: remote attackers could modify or rea...

CVE-2008-4458

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action...

CVE-2008-4458: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action...

CVE-2008-4142

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the esid parameter...

Sql injection

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the esid parameter...

CVE-2008-4142

CVE-2008-4142 is a SQL injection vulnerability in E-Php CMS affecting article.php via the es_id parameter, allowing remote attackers to execute arbitrary SQL. The CVSSv2 base score is 7.5 (HIGH). The provided documents describe the vulnerability and its existence but do not detail a workaround or...