CVE-2011-5168: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-2145 · Unknown · Banana Dance

Name of the Vulnerable Software and Affected Versions: Banana Dance versions prior to B.1.5 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the user.php file. Recommendations: For versions prior to B.1.5, update to version...

Sichkg CMS SQL Injection

Exploit Title: sichkg CMS SQL Injection Vulnerability Google Dork: "Powered by sichkg.com" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.sichkg.com Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Serv...

PT-2012-5620

Name of the Vulnerable Software and Affected Versions Kunena component version 1.7.2 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the news.php file. This can lead to unauthorized access and manipulation of database content...

CVE-2012-4868: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5139

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5137

Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL commands via the 1 TopicID parameter to viewtopic.php, the 2 BoardID parameter to viewboard.php, or 3 CatID parameter to viewcat.php...

PT-2012-2015

Name of the Vulnerable Software and Affected Versions EGroupware Enterprise Line versions prior to 11.1.20110804-1 EGroupware Community Edition versions prior to 1.8.001.20110805 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter...

CVE-2011-4949: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in phpgwapi/js/dhtmlxtree/samples/withdb/loaddetails.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5139: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-2117

Name of the Vulnerable Software and Affected Versions Pre Studio Business Cards Designer affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the page.php file. Recommendations At the moment, there is no informatio...

Power-eCommerce CMS Cross Site Scripting

Exploit Title: Power-eCommerce CMS Cross Site Scripting Vulnerability Google Dork:intext:"Site Powered by: Power-eCommerce.com" Date: 08/24/2012 Author: Crim3R Vendor Home : http://www.power-ecommerce.com/ Tested on: all ======================================== id parametr in Questions.asp and 7 ...

CVE-2011-5106

Cross-site scripting XSS vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2011-5106: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2011-5103: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

PT-2012-2084

Name of the Vulnerable Software and Affected Versions Flexible Custom Post Type plugin versions prior to 0.1.7 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the id parameter in the edit-post.php file...

PT-2012-2081

Name of the Vulnerable Software and Affected Versions Alurian Prismotube PHP Video Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "index.php" endpoint. Recommendations At the...

CVE-2011-5099

SQL injection vulnerability in helper/popup.php in the ccNewsletter modccnewsletter component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in helper/popup.php in the ccNewsletter modccnewsletter component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-2077

Name of the Vulnerable Software and Affected Versions ccNewsletter mod ccnewsletter versions 1.0.7 through 1.0.9 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the helper/popup.php file. Recommendations For versions 1.0.7 throug...