3 matches found
CVE-2006-6478
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a email.php, the 2 no parameter in b voirannonce.php, the 3 idmembre parameter in c admin/adminmembre/fichemembre.php, and the 4 idannonce parameter in ...
CVE-2006-6480: Undefined Security Weakness
admin/adminmembre/fichemembre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain sensitive information via the idmembre parameter, which discloses the passwords for arbitrary users...
CVE-2006-6478: Undefined Security Weakness
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a email.php, the 2 no parameter in b voirannonce.php, the 3 idmembre parameter in c admin/adminmembre/fichemembre.php, and the 4 idannonce parameter in ...