CVE-2009-5090: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possibly other unspecified vectors...

PT-2011-1339

Name of the Vulnerable Software and Affected Versions Bloggeruniverse Beta 2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is possible via the id parameter in editcomments.php when magic quotes gpc is disabled. Recommendations For Bloggeruniverse Beta 2,...

PT-2011-1340

Name of the Vulnerable Software and Affected Versions Vlinks versions 1.0.3 through 1.1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the page.php file. Recommendations For versions 1.0.3 through 1.1.6, consider...

WordPress Plugin Couponer 1.2 - SQL Injection

Exploit Title: WordPress Couponer plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-31 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/couponer.zip Version: 1.2 tested Note: magicquotes has to be turned off --- PoC ---...

Comfortsuite SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

Joomla Soft SQL Injection

Application Name : Joomla comsoft Type : SQL Injection author : Sktevahshat Google Dork : index.php?option=comsoft E-mail: [email protected] http://www.sthst.com/index.php?option=comsoft&cid=3 heloo new bug in joomla -------------------------------------------------- ", "+", "%"; $id =...

Sql injection

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4809

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4809

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4809: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

PT-2011-1755

Name of the Vulnerable Software and Affected Versions DBSite version 1.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the ID parameter in the index.php file. Recommendations For DBSite version 1.0, avoid using the ID...

eTAWASOL SQL Injection

+Title : eTAWASOL Sql Injection vulnerability +Vender : http://www.etawasol.com/ +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 03/07/2011 +Home : www.skote-vahshat.com +MyArchive : www.xpl.skote-vahshat.com Err0r 0n : back.asp Exploit :...

Leading Edge Technology Solutions SQL Injection

========================================================================= Leading Edge Technology Solutions L.E.T.S SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+=...

CVE-2010-4793

SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Sql injection

SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL commands via the ID parameter...

PT-2011-1741

Name of the Vulnerable Software and Affected Versions Site2Nite Auto e-Manager affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ID parameter in the "detail.asp" page. Recommendations At the moment,...

PT-2011-1743

Name of the Vulnerable Software and Affected Versions Joomla! component com jscalendar versions 1.5.1 through 1.5.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ev id parameter in a details action to the "index.php" endpoint...

CVE-2010-4793: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4774

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

Sql injection

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...