9763 matches found
PT-2012-2077
Name of the Vulnerable Software and Affected Versions ccNewsletter mod ccnewsletter versions 1.0.7 through 1.0.9 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the helper/popup.php file. Recommendations For versions 1.0.7 throug...
Sql injection
SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2012-4282
SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2012-4282: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2012-5310
Name of the Vulnerable Software and Affected Versions Trombinoscope version 3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "photo.php" file. Recommendations For Trombinoscope version 3.5, consider restricting acces...
Openconstructor CMS 3.12.0 - id Multiple SQL Injections
Openconstructor CMS 3.12.0 - id Multiple SQL Injections Title: Openconstructor CMS 3.12.0 'id' parameter multiple SQL injection vulnerabilities Affected Software: http://www.openconstructor.org/ http://code.google.com/p/openconstructor/downloads/list...
CVE-2012-4060: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...
PT-2012-5178
Name of the Vulnerable Software and Affected Versions ASP-DEv XM Forums version RC3 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by exploiting the id parameter in the following API endpoints: "profile.asp", "forum.asp", or "topic.asp"...
CVE-2012-3791: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 itemdelete.php, 2 itemstatus.php, 3 itemdetail.php, 4 itemmodify.php, or 5 itemposition.php in admin/; or 6 status parameter to...
PT-2012-5001
Name of the Vulnerable Software and Affected Versions Simple Web Content Management System version 1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to several API endpoints, including "item delete.php", "item status.php...
Cross site scripting
Cross-site scripting XSS vulnerability in Support Incident Tracker SiT! 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message...
PT-2012-3896
Name of the Vulnerable Software and Affected Versions Support Incident Tracker SiT! versions 3.65 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to "index.php", which is not properly handled in an error...
CVE-2012-2235: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Support Incident Tracker SiT! 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message...
CVE-2012-2913: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 leafletlayer.php or 2 leafletmarker.php, as reachable through wp-admin/admin.php...
PT-2012-4359
Name of the Vulnerable Software and Affected Versions Leaflet plugin for WordPress version 0.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to specific API endpoints, such as "/leaflet layer.php" or "/leaflet marker.php", which can be...
CVE-2012-1778
SQL injection vulnerability in artykulprint.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in artykulprint.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2012-3529
Name of the Vulnerable Software and Affected Versions CreateVision CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the artykul print.php file. Recommendations At the moment, there is no information about a...
CVE-2012-1778: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in artykulprint.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...