CVE-2008-6776: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewcomments.php in Scripts For Sites SFS EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2008-6778: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewfaqs.php in Scripts for Sites SFS EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6783: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-6784: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-6782: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

SQL INJECTION (SHELL UPLOAD)--EZ-blog Beta2-->

------------------------------------------------- SQL INJECTION VULNERABILITY --EZ-blog Beta2-- ------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/ez-blog/ --DOWNLOAD: http://sourceforge.net/projects/ez-blog/ --DEMO: N/A --CATEGORY: CMS /...

EZ-Blog Beta2 (category) Remote SQL Injection Vulnerability

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

EZ-Blog Beta2 - 'category' SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTIO...

MDKA-2007:136 : ez-ipupdate

A 64-bit type error in ez-ipupdate would cause it to creash on x8664 systems. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

FreeBSD : ez-ipupdate -- format string vulnerability (e69ba632-326f-11d9-b5b7-000854d03344)

Data supplied by a remote server is used as the format string instead of as parameters in a syslog call. This may lead to crashes or potential running of arbitrary code. It is only a problem when running in daemon mode very common and when using some service types. %NASLMINLEVEL 70300 C Tenable...

EZ Webitor - Authentication Bypass

EZ Webitor - Authentication Bypass -------------------------AllaH AkbaR------------------------------- ezwebitor Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

EZ Webitor - Authentication Bypass

-------------------------AllaH AkbaR------------------------------- ezwebitor Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.php...

Mandriva Update for ez-ipupdate MDKA-2007:136 (ez-ipupdate)

Check for the Version of ez-ipupdate OpenVAS Vulnerability Test Mandriva Update for ez-ipupdate MDKA-2007:136 ez-ipupdate Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for ez-ipupdate MDKA-2007:136 (ez-ipupdate)

Check for the Version of ez-ipupdate OpenVAS Vulnerability Test Mandriva Update for ez-ipupdate MDKA-2007:136 ez-ipupdate Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Cross site scripting

Cross-site scripting XSS vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

EZ-Blog 'public/view.php' SQL Injection Vulnerability

EZ-Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

EZ-Blog SQLi Vulnerability (Mar 2009) - Active Check

EZ-Blog is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

CVE-2009-0762

The CVE-2009-0762 entry describes a Cross-site Scripting (XSS) vulnerability in ScriptEz Ez PHP Comment, where an attacker can inject arbitrary web script or HTML via the name parameter. The affected software component is the Ez PHP Comment feature within ScriptEz Ez (no vendor/version specifics ...

CVE-2009-0762

Cross-site scripting XSS vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0762: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...