6878 matches found
AJ Auction 1.0 - id SQL Injection
AJ Auction 1.0 - id SQL Injection AJ Auction OOPD V.1 SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...
Sql injection
SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2755
SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter, or 2 the term parameter in a search action. NOTE: the currentsubsection parameter is already covered by CVE-2007-3889...
Directory traversal
Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 ewikiid and 2 ewikiaction parameters to fragments/css.php, and possibly the 3 id parameter ...
CVE-2008-2554
Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp and 2 cat parameter to templatearchivescat.asp...
CVE-2008-2231
SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage Slash aka Slashcode R25094 and earlier allows remote attackers to execute SQL commands and read table information via the id parameter...
Sql injection
SQL injection vulnerability in forum/topicdetail.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to netbutik.php and the 2 id parameter to product.php...
CVE-2008-2413
Cross-site scripting XSS vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-2413
Cross-site scripting XSS vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-2393
SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-2007-2549...
Sql injection
SQL injection vulnerability in Kostenloses Linkmanagementscript allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.php and 2 topview.php...
Sql injection
SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2175
SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2130
SQL injection vulnerability in pollvote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in pollvote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in info.php in Project Alumni 1.0.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2103
Cross-site scripting XSS vulnerability in Bugzilla 2.17.2 and later allows remote attackers to inject arbitrary web script or HTML via the id parameter to the "Format for Printing" view or "Long Format" bug list...