10 matches found
EUVD-2007-2570
Malware in sbrugna...
CVE-2008-5890
SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5890
SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5890
CVE-2008-5890 concerns Injader (before 2.1.2) with an SQL injection in feeds.php. The vulnerability arises from unchecked input on the id parameter, enabling remote attackers to manipulate SQL commands. Affected component: feeds.php in Injader; root cause: improper input handling leading to SQL i...
CVE-2008-5890: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Injader CMS SQL Injection
Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000, CHAR32,CHAR0, NULL, NULL, NULL FROM...
Injader CMS 2.1.1 (id) Remote SQL Injection Vulnerability
No description provided by source. Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id=SQL magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000,...
Injader CMS 2.1.1 - 'id' SQL Injection
Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000, CHAR32,CHAR0, NULL, NULL, NULL FROM...
CVE-2007-2577: Undefined Security Weakness
Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via 1 the mode parameter to feeds.php, the 2 formcat parameter to a news/list/index.php or b certain news/details/id/actioncreate/index.php files, or 3 the formmods parameter to...