CVE-2006-2080

SQL injection vulnerability in portfoliophotopopup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, which is not cleansed before calling the countclick function in includes/functions/fnsstd.php. NOTE: this issue could...

CVE-2006-2080

CVE-2006-2080 affects Verosky Media Instant Photo Gallery 1.0.2. The vulnerability is an SQL injection in portfolio_photo_popup.php (id parameter) that is not cleansed before calling count_click in includes/functions/fns_std.php, allowing remote attackers to execute arbitrary SQL commands. The no...

CVE-2006-1964

SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-1964

SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter in addlinklwp.cgi and the 2 id, 3 forgotid, and 4 forgotpass parameters in edit.cgi...

CVE-2006-1893

Cross-site scripting XSS vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-1893

Cross-site scripting XSS vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-1849

Multiple SQL injection vulnerabilities in membersonly/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 position and 2 id parameter...

CVE-2006-1837

SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Sql injection

SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability...

Sql injection

Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a 1 greply or 2 gpermaPost action to the blog shard engine/shards/blog.php, or a 3 gviewContent action to the content shard...

CVE-2006-1763

Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a 1 greply or 2 gpermaPost action to the blog shard engine/shards/blog.php, or a 3 gviewContent action to the content shard...

CVE-2006-1755

SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-1763

Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a 1 greply or 2 gpermaPost action to the blog shard engine/shards/blog.php, or a 3 gviewContent action to the content shard...

CVE-2006-1710

SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 email and 2 id parameters...

Sql injection

SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 email and 2 id parameters...

Sql injection

SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...