9763 matches found
Sql injection
SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter...
PT-2010-5315
Name of the Vulnerable Software and Affected Versions phpCheckZ version 1.1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter when magic quotes gpc is disabled. Recommendations For phpCheckZ version 1.1.0, consider disabling t...
CVE-2010-4143: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4144: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter...
PT-2010-5316
Name of the Vulnerable Software and Affected Versions Kisisel Radyo Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the Id parameter in the radyo.asp file. Recommendations At the moment, there is no...
CVE-2010-3602
Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-3608
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 password pw parameters to a admin.php or b user.php...
CVE-2010-3602
Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-3602: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-3608: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 password pw parameters to a admin.php or b user.php...
CVE-2010-3607: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the id parameter...
CVE-2010-3465: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to Default.aspx and the 2 type parameter to SearchResults.aspx...
CVE-2010-3422: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the JGen comjgen component 0.9.33 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...
CVE-2009-4992
SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 category.php and 2 wcategory.php, and the 3 keywords parameter to search.php...
CVE-2009-4983
Multiple cross-site scripting XSS vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 category.php and 2 wcategory.php, and the 3 keywords parameter to search.php...
CVE-2009-4992: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
Netvidade (detalhe.php) Blind SQL Injection Vulnerability
Exploit for php platform in category web applications ========================================================= Netvidade detalhe.php Blind SQL Injection Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...