PT-2011-1880

Name of the Vulnerable Software and Affected Versions Joomla! component com camelcitydb2 version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the "index.php" endpoint. Recommendations For version 2.2 of the...

PT-2011-1862

Name of the Vulnerable Software and Affected Versions Joomla! component com restaurantguide version 1.0.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the id parameter in a "country" action to "index.php". Recommendations For version 1.0.0, avoid...

PT-2011-1879

Name of the Vulnerable Software and Affected Versions Mambo and Joomla! affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a showExpertProfileDetailed action to index.php...

PT-2011-1875

Name of the Vulnerable Software and Affected Versions WAnewsletter version 2.1.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "index.php" file. Recommendations For WAnewsletter version 2.1.2, consider restricting...

CVE-2010-4955: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078...

CVE-2010-4899: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-1834

Name of the Vulnerable Software and Affected Versions CMS WebManager-Pro versions prior to 8.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the c.php file. Recommendations For versions prior to 8.1, update to version 8.1...

PT-2011-1808

Name of the Vulnerable Software and Affected Versions WeBid version 0.8.5 P1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in the "confirm.php" file. Recommendations For WeBid version 0.8.5 P1, avoid using the id...

CVE-2010-4873: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Sql injection

SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action...

PT-2011-1788

Name of the Vulnerable Software and Affected Versions Joomla! com ccinvoices component affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in a viewInv action to index.php...

PT-2011-1789

Name of the Vulnerable Software and Affected Versions Zuitu version 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in a consume action in the "ajax/coupon.php" file when magic quotes gpc is disabled. Recommendations For...

CVE-2010-4853: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ccInvoices comccinvoices component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php...

CVE-2010-4860: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in productdesc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-1795

Name of the Vulnerable Software and Affected Versions MyPhpAuction version 2010 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the product desc.php file. Recommendations For MyPhpAuction version 2010, consider restricting...

CVE-2010-4854: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action...

PT-2011-3945

Name of the Vulnerable Software and Affected Versions ACDSee FotoSlate version 4.0 Build 146 Description The issue concerns multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. This is achieved by providing a long id parameter in either a String or Int tag...

CVE-2011-2595: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a 1 String or 2 Int tag in a FotoSlate Project aka PLP file...

CVE-2009-5091

SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-5091: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter...