10 matches found
CVE-2011-5142
Multiple cross-site scripting XSS vulnerabilities in Open Business Management OBM 2.4.0-rc13 and probably earlier allow remote attackers to inject arbitrary web script or HTML via the 1 tfdelegation, 2 tfip, or 3 tfname parameter in a search action to host/hostindex.php; 4 login parameter to...
CVE-2011-5145
Multiple SQL injection vulnerabilities in Open Business Management OBM 2.4.0-rc13 and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 seldomainid or 2 action parameter to obm.php; 3 tfuser parameter in a search action to group/groupindex.php; 4...
CVE-2011-5145: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Open Business Management OBM 2.4.0-rc13 and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 seldomainid or 2 action parameter to obm.php; 3 tfuser parameter in a search action to group/groupindex.php; 4...
CVE-2008-6358
The CVE-2008-6358 entry describes an SQL injection vulnerability in Social Groupie’s group_index.php, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. Connected documents confirm the same description but do not provide version, affected builds, or a confirmed ...
CVE-2008-6358
SQL injection vulnerability in groupindex.php in Social Groupie allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6358: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in groupindex.php in Social Groupie allows remote attackers to execute arbitrary SQL commands via the id parameter...
Social Groupie (group_index.php id) Remote SQL Injection Vulnerability
No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...
Social Groupie (group_index.php id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Social Groupie groupindex.php id Remote SQL Injection Vulnerability ======================================================================...
CVE-2006-3010
Multiple SQL injection vulnerabilities in Open Business Management OBM 1.0.3 pl1 allow remote attackers to execute arbitrary SQL commands via the 1 neworder and 2 orderdir parameters to a index.php, b group/groupindex.php, c user/userindex.php, d list/listindex.php, and e company/companyindex.php...
CVE-2006-3009: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Open Business Management OBM 1.0.3 pl1 allow remote attackers to inject arbitrary HTML or web script via the 1 tflang, 2 tfname, 3 tfuser, 4 tflastname, 5 tfcontact, 6 tfdatebefore, and 7 tfdateafter parameters to files such as a...