PT-2011-1721

Name of the Vulnerable Software and Affected Versions S-CMS version 2.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to "viewforum.php". This enables attackers to execute malicious scripts on the victim's browser...

PT-2011-1720

Name of the Vulnerable Software and Affected Versions S-CMS version 2.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the viewforum.php file via the id parameter. Recommendations For S-CMS version...

PT-2011-1719

Name of the Vulnerable Software and Affected Versions CommodityRentals DVD Rentals Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cat id parameter in a "catalog" action, which is part of the index.ph...

PT-2011-1723

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

CVE-2010-4772: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php...

CVE-2010-4774: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

CVE-2010-4771: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, which is not properly handled in a forced SQL error message...

CVE-2010-4753

Cross-site scripting XSS vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, which is not properly handled in a forced SQL error message...

PT-2011-1701

SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic quotes gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the id parameter in an edituser action, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485...

CVE-2010-4753: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, which is not properly handled in a forced SQL error message...

PT-2011-1703

Name of the Vulnerable Software and Affected Versions LightNEasy version 3.2.1 Description A cross-site scripting XSS issue exists due to improper handling of the id parameter in a forced SQL error message, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For...

CVE-2010-4751: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the id parameter in an edituser action, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485...

CVE-2011-1048

SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-2834

Name of the Vulnerable Software and Affected Versions MihanTools version 1.33 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the product.php file. Recommendations For MihanTools version 1.33, avoid using the id...

CVE-2011-1048: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4721

SQL injection vulnerability in news.php in Immo Makler allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in news.php in Immo Makler allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-1671

Name of the Vulnerable Software and Affected Versions Immo Makler affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "news.php" file. Recommendations At the moment, there is no information...