CVE-2008-6844

The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...

Authentication flaw

The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...

CVE-2008-6844

The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...

CVE-2008-6844

CVE-2008-6844 affects eZ Publish vulnerable in the registration view (/user/register) prior to versions 3.9.5, 3.10.1, and 4.0.1. The underlying issue permits remote attackers to gain privileges as other users by manipulating ContentObjectAttribute_data_user_login_30, ContentObjectAttribute_data_...

CVE-2008-6844

The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...

CVE-2008-6844: Undefined Security Weakness

The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...

Sql injection

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2009-1626

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-6808

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-6808

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2009-1626

EZ-Blog before Beta 2 20090427 is affected by an SQL injection in public/specific.php via the category parameter when magic_quotes_gpc is disabled. The underlying issue is unsanitized input leading to arbitrary SQL execution. Affected product is EZ-Blog; no vendor/patch details or specific remedi...

CVE-2009-1626

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-6808

CVE-2008-6808 describes a SQL injection vulnerability in the Links.php component of Scripts for Sites (SFS) EZ Link Directory. The flaw allows remote attackers to manipulate the underlying SQL query via the cat_id parameter in the list action, potentially enabling arbitrary SQL execution. Connect...

CVE-2009-1626: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-6808: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-6794

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6794

CVE-2008-6794 refers to a SQL injection vulnerability in the file directory.php of Scripts For Sites (SFS) EZ Pub Site. The vulnerability allows an attacker to execute arbitrary SQL commands through the cat parameter, enabling remote access to the database according to the NVD description. Relate...

CVE-2008-6794: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...