CVE-2006-5889: Undefined Security Weakness

SQL injection vulnerability in printLog.php in BrewBlogger BB 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-5891: Undefined Security Weakness

SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-5892: Undefined Security Weakness

SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-5802: Undefined Security Weakness

SQL injection vulnerability in messagedetails.php in The Web Drivers Simple Forum, dated 20060318, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-5632

Cross-site scripting XSS vulnerability in changepass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-5631. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2006-5632: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in changepass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-5631. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

PT-2006-6340 · Ig · Ig Shop

Name of the Vulnerable Software and Affected Versions: iG Shop version 1.4 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the id parameter in the change pass.php file. Recommendations: For iG Shop version 1.4, avoid using...

CVE-2006-5140: Undefined Security Weakness

SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script phpkimagehost 0.7a allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4905: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Artmedic Links 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, which is processed by the readfile function...

CVE-2006-4853

SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp...

CVE-2006-4895: Undefined Security Weakness

IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php...

CVE-2006-4853: Undefined Security Weakness

SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp...

CVE-2006-4715

SQL injection vulnerability in pdfversion.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4715: Undefined Security Weakness

SQL injection vulnerability in pdfversion.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4598: Undefined Security Weakness

Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL commands via the 1 go parameter and 2 id parameter in a rate action...

CVE-2006-4601: Undefined Security Weakness

SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4586: Undefined Security Weakness

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...

CVE-2006-4592: Undefined Security Weakness

Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to conduct SQL injection attacks via "" characters in the id parameter, which are not filtered by the protection mechanism...

CVE-2006-4540

Cross-site scripting XSS vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-4540: Undefined Security Weakness

Cross-site scripting XSS vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script or HTML via the id parameter...