Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a index.php, or the 2 search parameter or 3 theme cookie to b recherche.php...

CVE-2007-3882

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picturerealedit.asp, and probably other unspecified vectors...

envivocms-sql.txt

Dear [email protected], durito damagelab -duritoatmaildotru- reported SQL injection vulnerability in enVivo!CMS through ID parameter of default.asp. Example: http://www.example.com/default.asp?action=article&ID=-1+or+1=SELECT+TOP+1+username+from+users-- Original message in Russian:...

Sql injection

Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script avtutorial 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 userid parameters, a different issue than CVE-2007-3630...

Sql injection

Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 b.php and 2 account/gallery.php, and other unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 showthread.php or 2 showboard.php...

Sql injection

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3538

SQL injection vulnerability in qtgmsgview.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3538

SQL injection vulnerability in qtgmsgview.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3518

SQL injection vulnerability in msg.php in HispaH YouTube Clone Script youtubeclone allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3515

SQL injection vulnerability in viewevent.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3518

CVE-2007-3518 describes an SQL injection in msg.php of the HispaH YouTube Clone Script (youtubeclone). The vulnerability arises from unsafely handling the id parameter, allowing remote attackers to execute arbitrary SQL commands. This is documented in NVD and CVE records, with publicly referenced...

Sql injection

SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter in an add action...

CVE-2007-3188

SQL injection vulnerability in downindir.asp in Fullaspsite GeometriX Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in downindir.asp in Fullaspsite GeometriX Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in comments.php in Maran PHP Blog Maran Blog, possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in addcomment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-2942

SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...