6878 matches found
Sql injection
SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...
CVE-2008-4653
SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 dish.php and 2 menu.php...
Sql injection
SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4488
Cross-site scripting XSS vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name and 2 id parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4468
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in showseriesink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4374
SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the id parameter in a playgame action...
CVE-2008-4374
CVE-2008-4374 describes an SQL injection in CMS Buzz: index.php vulnerable to manipulation of the id parameter in the playgame action, enabling remote SQL command execution. The issue is due to improper input handling in the affected PHP file, with CVSS v2 indicating High severity (base score 7.5...
CVE-2008-4379
Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-4357
SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4355
SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum aka PHP Forum or pForum 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4150
SQL injection vulnerability in picturecategory.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763...
Sql injection
SQL injection vulnerability in picturecategory.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763...
Sql injection
Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 ucat parameter to upgrade.php and the 2 id parameter to linkadmin/edit.php...