CVE-2013-6872

SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action...

CVE-2013-6872: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action...

PT-2014-3211

Name of the Vulnerable Software and Affected Versions Collabtive versions prior to 1.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter in a "projectpdf" action within the managetimetracker.php file. Recommendations F...

PT-2014-2396

Name of the Vulnerable Software and Affected Versions Newsletter Manager plugin versions 1.0.2 and earlier for WordPress Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in the admin/test mail.php file. This could...

CVE-2012-6627: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/testmail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Sql injection

SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to default.asp...

CVE-2013-7278: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to default.asp...

PT-2014-3327

Name of the Vulnerable Software and Affected Versions Naxtech CMS Afroditi version 1.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in the "default.asp" endpoint. Recommendations For Naxtech CMS...

Sql injection

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

CVE-2013-7216

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

PT-2013-6296

Name of the Vulnerable Software and Affected Versions Classifieds Creator version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ID parameter to "demo/classifieds/product.asp", or the UserID or Password field to...

CVE-2013-7216: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

Sql injection

SQL injection vulnerability in action.php in Leed Light Feed, possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action...

PT-2013-3858

Name of the Vulnerable Software and Affected Versions Leed Light Feed versions prior to 1.5 Stable Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in a "removeFolder" action in the "action.php" file. Recommendations For versio...

CVE-2013-2627: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in action.php in Leed Light Feed, possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action...

Directory traversal

Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the 1 tmpid parameter to websitebuilder/showtemplateimage.php, 2 fname parameter to admin/downloadfile.php, or 3 id parameter to support/admin/csvdownload.php; or ...

Sql injection

SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2013-7190

Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the 1 tmpid parameter to websitebuilder/showtemplateimage.php, 2 fname parameter to admin/downloadfile.php, or 3 id parameter to support/admin/csvdownload.php; or ...

CVE-2013-7187: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2013-6287

Name of the Vulnerable Software and Affected Versions FormCraft plugin versions 1.3.7 and earlier for WordPress Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the form.php file. Recommendations For FormCraft plugin versions 1.3.7 and earlie...