CVE-2006-6842: Undefined Security Weakness

SQL injection vulnerability in admin/adminacronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.53 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4582: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other users via unspecified vectors, as demonstrated by deleting arbitrary users via the id parameter in a deleteuser action in users.php...

CVE-2006-6828: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the grup parameter in admin.asp, or the id parameter in 2 default.asp or 3 admin.asp. NOTE: The provenance of this information is unknown; the details are obtained...

CVE-2006-6813: Undefined Security Weakness

SQL injection vulnerability in detail.asp in Mxmania File Upload Manager FUM 1.0.6 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-6805

SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-6806

SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-6804

CVE-2006-6804 affects Dragon Business Directory - Pro (aka Dragon Internet Business Search Directory - Pro) and is due to an SQL injection in bus_details.asp. The vulnerability is exploitable via the ID parameter in versions 3.01.12 and earlier. Impacted data can be partially disclosed or corrupt...

CVE-2006-6806: Undefined Security Weakness

SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-6787: Undefined Security Weakness

SQL injection vulnerability in admin/adminmailadressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-6804: Undefined Security Weakness

SQL injection vulnerability in busdetails.asp in Dragon Business Directory - Pro aka Dragon Internet Business Search Directory - Pro 3.01.12 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-6792: Undefined Security Weakness

SQL injection vulnerability in calendardetail.asp in Calendar MX BASIC 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6805: Undefined Security Weakness

SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-6671

SQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6671: Undefined Security Weakness

SQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6672: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Burak Yylmaz Download Portal allow remote attackers to execute arbitrary SQL commands via the 1 kid or possibly 2 id parameter to a HABERLER.ASP and b ASPKAT.ASP. NOTE: The provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6642: Undefined Security Weakness

SQL injection vulnerability in haber.asp in Contra Haber Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6577: Undefined Security Weakness

SQL injection vulnerability in polls.php in Neocrome Land Down Under LDU 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6542: Undefined Security Weakness

SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6460

Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to login.php, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2509...

CVE-2006-6461

tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508...