Opial 1.0 SQL Injection

Opial 1.0 albumid Remote SQL Injection Vuln Founder : ThE g0bL!N SQL Injection Vulnerability Exploit: http://www.path.com/albumdetail.php?albumid=-31+union//select//1,version,3,4,5,6,7,8,9,10,11,12,13,14,user,16-- Demo: ---- http://www.opial.com/demo/ Greeting : SuperCtistal My Master And all...

CVE-2009-2290

SQL injection vulnerability in the Boy Scout Advancement combsadv component 0.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a 1 account or 2 event task to index.php...

CVE-2009-2290: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Boy Scout Advancement combsadv component 0.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a 1 account or 2 event task to index.php...

Sql injection

SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2235: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2147

SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2148

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2148

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2148: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2147: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2124

Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter...

Sql injection

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2127

Cross-site scripting XSS vulnerability in showactivity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2009-2122

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2122: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2127: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in showactivity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2009-2115

admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message...

CVE-2009-2115

Affected software : SkyBlueCanvas 1.1 r237. Vulnerability : admin.php exposes an information disclosure vulnerability where a remote authenticated administrator can trigger an error message via an invalid id parameter that reveals the installation path. Root cause : improper handling of the id pa...