CVE-2012-5297: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5899

Name of the Vulnerable Software and Affected Versions MyStore Xpress Tienda Virtual version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "art catalogo.php" file. Recommendations For MyStore Xpress Tienda Virtual...

CVE-2012-5294: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in artdetalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5891

Name of the Vulnerable Software and Affected Versions Atar2b CMS version 4.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to several API endpoints: "gallery e.php", "pageE.php", or "pageH.php". Recommendations For...

CVE-2012-5288: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5300: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in artcatalogo.php in MyStore Xpress Tienda Virtual 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5893

Name of the Vulnerable Software and Affected Versions MyStore Xpress Tienda Virtual affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the art detalle.php file. Recommendations For MyStore Xpres...

PT-2012-5888

Name of the Vulnerable Software and Affected Versions Plogger version 1.0 RC1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by exploiting the id parameter in the API endpoints, specifically in "index.php" or "gallery.php". Recommendations Fo...

PT-2012-5895

Name of the Vulnerable Software and Affected Versions Mavili Guestbook affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the id parameter to...

CVE-2012-1603

Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL commands via the 1 curstr parameter in the findUsers function, 2 id parameter in the isIdAvailable function, or 3 username parameter in the getGreetings function...

Sql injection

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5227

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5227: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5839

Name of the Vulnerable Software and Affected Versions Peel SHOPPING versions 2.8 through 2.9 Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the administrer/tva.php file. Recommendations For Peel SHOPPING versions 2.8 through 2.9, avoid usin...

CVE-2012-5163

Cross-site scripting XSS vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enablecategory action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enablecategory action to index.php...

PT-2012-5812

Name of the Vulnerable Software and Affected Versions OSClass versions prior to 2.3.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enable category action to "index.php". Recommendations For versions prior to...

CVE-2012-5162: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 editcategorypost or 2 enablecategory action to index.php...

CVE-2012-5163: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enablecategory action to index.php...

CVE-2012-5163

Cross-site scripting XSS vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enablecategory action to index.php...