56 matches found
Sql injection
Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the 1 eventID parameter to eventinfo.php and the 2 userID parameter to listuser.php...
CVE-2008-2870: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the 1 eventID parameter to eventinfo.php and the 2 userID parameter to listuser.php...
FairSoft S.Mini web Busines Prelease & Calendar asp Sql injection
thnx bro FairSoft S.Mini web Busines Prelease Calendar asp Sql injection include patch...ocf,ns ocf/Calendar/ViewEvent.asp,ns/Calendar/ViewEvent.asp,aboutus/newsroom/ViewPressRelease.asp Credit : CodeXpLoder'tq Mail : codexploderathotmaildotcom Site : codexploder.biyosecurity.net,biyofrm.com Sour...
aspWebCalendar 4.5 (calendar.asp eventid) SQL Injection Vulnerability
No description provided by source. Title : aspWebCalendar Remote SQL Injection Vulnerability Author : parad0x Contact : : D.Page : http://www.scriptdungeon.com/script.php?ScriptID=4306 $$ : free S.Page : http://fullrevolution.com http://target/path/calendar.asp?action=viewevent&eventid=SQL Exampl...
Sql injection
SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4...
CVE-2006-2018: Undefined Security Weakness
SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4...
CVE-2004-1552
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via 1 the username field on the login page or 2 the eventid parameter to calendar.asp...
CVE-2004-1552: Undefined Security Weakness
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via 1 the username field on the login page or 2 the eventid parameter to calendar.asp...
CVE-2004-1552
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via 1 the username field on the login page or 2 the eventid parameter to calendar.asp...
CVE-2004-0036
CVE-2004-0036 describes a SQL injection in calendar.php for vBulletin Forum 2.3.x before 2.3.4, exploitable via the eventid parameter to exfiltrate data. Affected component is the calendar feature in vBulletin 2.3.x; root cause is improper input handling in eventid. Impact stated: attackers can s...
CVE-2004-0036
SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter...
CVE-2004-0036: Undefined Security Weakness
SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter...
CVE-2004-0036
SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter...
vBulletin Forum 2.3.xx calendar.php SQL Injection
vBulletin Forum 2.3.xx calendar.php SQL Injection ======================================================== Website: www.safechina.net Discovered by: mslug [email protected] Description: ============= There exist a sql injection problem in calendar.php. Notice the eventid field. -------- Cut fr...
vBulletin calendar.php eventid Parameter SQL Injection
A vulnerability has been discovered in the 'calendar.php' script that allows unauthorized users to inject SQL commands through the 'eventid' parameter. An attacker may use this flaw to gain the control of the remote database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From:...
vbulletinSQL.txt
vBulletin Forum 2.3.xx calendar.php SQL Injection ======================================================== Website: www.safechina.net Discovered by: mslug [email protected] Description: ============= There exist a sql injection problem in calendar.php. Notice the eventid field. -------- Cut fr...