9763 matches found
PT-2011-1995
Name of the Vulnerable Software and Affected Versions NUs Newssystem version 1.02 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the Nus.php file. Recommendations For version 1.02, avoid using the id parameter in the...
CVE-2010-5047: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5055: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5060: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2011-1990
Name of the Vulnerable Software and Affected Versions Almnzm version 2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "index.php" endpoint. Recommendations For Almnzm version 2.1, avoid using the id parameter in the...
CVE-2010-5024
SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-5008
SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...
Sql injection
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...
CVE-2010-5041
SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...
PT-2011-1976
Name of the Vulnerable Software and Affected Versions NP Gallery plugin version 0.94 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a plugin action within the index.php file of the NP Gallery plugin...
CVE-2010-5014: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQL commands via the ladderid parameter...
CVE-2010-5041: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...
CVE-2010-4997: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...
CVE-2010-5012: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
PT-2011-1932
Name of the Vulnerable Software and Affected Versions OlyKit Swoopo Clone 2010 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a product action within the index.php file. Recommendations For OlyKit Swoopo Clone...
PT-2011-1947
Name of the Vulnerable Software and Affected Versions DaLogin versions 2.2 through 2.2.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "new.php" file. Recommendations For DaLogin versions 2.2 through 2.2.5, avoid usin...
CVE-2010-4981
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4970
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...