11 matches found
EUVD-2007-2570
Malware in sbrugna...
PT-2011-4682
Name of the Vulnerable Software and Affected Versions Pixelpost version 1.7.3 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing certain files, such as includes/functions feeds.php, which reveals the...
CVE-2008-5890
SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5890
CVE-2008-5890 concerns Injader (before 2.1.2) with an SQL injection in feeds.php. The vulnerability arises from unchecked input on the id parameter, enabling remote attackers to manipulate SQL commands. Affected component: feeds.php in Injader; root cause: improper input handling leading to SQL i...
CVE-2008-5890
SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5890: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Injader CMS SQL Injection
Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000, CHAR32,CHAR0, NULL, NULL, NULL FROM...
Injader CMS 2.1.1 (id) Remote SQL Injection Vulnerability
No description provided by source. Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id=SQL magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000,...
Injader CMS 2.1.1 - 'id' SQL Injection
Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000, CHAR32,CHAR0, NULL, NULL, NULL FROM...
CVE-2007-2577: Undefined Security Weakness
Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via 1 the mode parameter to feeds.php, the 2 formcat parameter to a news/list/index.php or b certain news/details/id/actioncreate/index.php files, or 3 the formmods parameter to...