CVE-2005-3920

SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the 1 gal parameter to index.php or 2 id parameter to comments.php...

CVE-2005-3920: Undefined Security Weakness

SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the 1 gal parameter to index.php or 2 id parameter to comments.php...

CVE-2005-3916: Undefined Security Weakness

SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action...

CVE-2005-3882

SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3882: Undefined Security Weakness

SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3859: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

CVE-2005-3853: Undefined Security Weakness

SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 category parameters to index.php...

CVE-2005-3827: Undefined Security Weakness

SQL injection vulnerability in productcat in AgileBill 1.4.92 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Vote Caster 3.x SQL Inj. Vuln.

Vote Caster 3.x SQL Inj. Vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/vote-caster-3x-sql-inj-vuln.html Vendor:http://www.comdevweb.com/ Product link:http://www.comdevweb.com/votecaster.php affected version: 3.1 and prior. Vuln. Description:...

CVE-2004-2562: Undefined Security Weakness

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises LBE Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3744: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php...

CVE-2005-3555: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the 1 editattributes or 2 admin page...

CVE-2005-3638: Undefined Security Weakness

Cross-site scripting XSS vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in profile.php and 2 titles of posts...

CVE-2005-3575: Undefined Security Weakness

SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3515: Undefined Security Weakness

Cross-site scripting XSS vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

CVE-2005-3478: Undefined Security Weakness

SQL injection vulnerability in index.php in PHPCafe.net Tutorials Manager 1.0 Beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3131

Multiple cross-site scripting XSS vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to blank.html, or the createdataCX parameter to 2 calendard.html, 3...

CVE-2005-2818: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in DownFile 1.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter to 1 email.php,2 index.php, 3 del.php, or 4 addform.php...

CVE-2004-2358: Undefined Security Weakness

Cross-site scripting XSS vulnerability in adminwords.php for phpBB 2.0.6c allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-2486: Undefined Security Weakness

SQL injection vulnerability in modforum/readmessage.php in PortailPHP allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php with the affiche parameter set to "Forum-readmess", a different vulnerability than CVE-2005-1701...