7576 matches found
CVE-2006-6460
YourFreeWorld.com Short Url & Url Tracker Script is affected by CVE-2006-6460: an invalid id parameter to login.php leaks the internal path via an error message, exposing sensitive information. The entry notes a possible relation to CVE-2006-2509. Connected sources confirm the affected product an...
CVE-2006-6268
SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif"...
CVE-2006-6210
SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2006-5933
SQL injection vulnerability in update.asp in UltraSite 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-5892
SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2006-6556 · Brewblogger · Brewblogger
Name of the Vulnerable Software and Affected Versions: BrewBlogger version 1.3.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the printLog.php file. Recommendations: For BrewBlogger version 1.3.1, consider restricting...
CVE-2006-5632
Cross-site scripting XSS vulnerability in changepass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-5631. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...
PT-2006-6340 · Ig · Ig Shop
Name of the Vulnerable Software and Affected Versions: iG Shop version 1.4 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the id parameter in the change pass.php file. Recommendations: For iG Shop version 1.4, avoid using...
CVE-2006-4853
SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp...
CVE-2006-4715
SQL injection vulnerability in pdfversion.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-4540
Cross-site scripting XSS vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2006-4300
SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-4300
SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3364
SQL injection vulnerability in index.php in the NPSEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3213
SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspecified script, possibly host/yenihost.asp...
CVE-2006-3213
CVE-2006-3213 affects WeBBoA Hosting 1.1. A SQL injection vulnerability exists in the handling of the id parameter to an unspecified script (potentially host/yeni_host.asp), allowing remote attackers to execute arbitrary SQL commands. The issue arises from improper input handling in the vulnerabl...
CVE-2006-3176
SQL injection vulnerability in xarancmshaupt.php in xarancms 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3065
CVE-2006-3065 is a SQL injection vulnerability in blur6ex 0.3.462 affecting engine/shards/blog.php. The flaw allows remote attackers to inject arbitrary SQL via the ID parameter in a proc_reply action on the blog shard. The description notes similarity to CVE-2006-1763 but cites different affecte...
CVE-2006-3052
Cross-site scripting XSS vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the 1 eventid parameter to view-event-details.php or 2 selectevents parameter to event-registration.php. NOTE: the provenance of this information is unknown; the details...
