CVE-2012-6505: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mods/hours/data/gethours.php in PHP Volunteer Management 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

PT-2013-1968

Name of the Vulnerable Software and Affected Versions PHP Volunteer Management version 1.0.2 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the mods/hours/data/get hours.php file. Recommendations For PHP...

CVE-2012-6504: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mods/hours/data/gethours.php in PHP Volunteer Management 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-6521: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions...

PT-2013-2179

Name of the Vulnerable Software and Affected Versions Moxiecode plupload versions prior to 1.5.5 WordPress versions prior to 3.5.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter. This can lead to the execution of...

Sql injection

Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 data/gallery/edit.php, 2 data/guestbook/edit.php, 3 data/file/edit.php, 4 data/htmltext/edit.php, 5 data/publication/edit.php, or 6...

PT-2012-5056

Name of the Vulnerable Software and Affected Versions Open Constructor version 3.12.0 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter to several API endpoints, including "data/gallery/edit.php",...

CVE-2012-3873: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 data/gallery/edit.php, 2 data/guestbook/edit.php, 3 data/file/edit.php, 4 data/htmltext/edit.php, 5 data/publication/edit.php, or 6...

WordPress <= 1.5.4 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "id" parameter. Solution Update the plugin...

LikeItNow Script 1.0 SQL Injection

Exploit Title: LikeItNow Script SQLi Vulnerability Google Dork: intitle:"LikeItNow - What do you like?" Date: 17.11.2012 Exploit Author: xStarCode Vendor Homepage: Software Link: Version: 1.0 Tested on: Linux Vulnerable Parameters: id Exploit Details: ========...

Sql injection

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

CVE-2012-5912: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

PT-2012-6193

Name of the Vulnerable Software and Affected Versions PicoPublisher version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to API endpoints such as "page.php" or "single.php". Recommendations For PicoPublisher version 2.0...

CVE-2011-5215

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5215: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5218: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

PT-2012-2195

Name of the Vulnerable Software and Affected Versions DotA OpenStats versions 1.3.9 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "index.php" endpoint. Recommendations For DotA OpenStats versions 1.3.9 and...

PT-2012-5815

Name of the Vulnerable Software and Affected Versions ATutor AContent versions prior to 1.2-1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the field parameter to "course category/index inline editor submit.php" or "user/index inline...

PT-2012-5582

Name of the Vulnerable Software and Affected Versions Subrion CMS versions prior to 2.2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the id parameter to API endpoints such as "/admin/accounts/", "/admin/manage/", or...