9763 matches found
Sql injection
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5001
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4979
SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the imageid parameter...
Sql injection
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4981
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4970
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4974
SQL injection vulnerability in info.php in BrotherScripts BS and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4981
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
PT-2011-1904
Name of the Vulnerable Software and Affected Versions BrotherScripts BS Business Directory affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "articlesdetails.php" file. Recommendations At t...
PT-2011-1936
Name of the Vulnerable Software and Affected Versions esoftpro Online Contact Manager version 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the view.php file. Recommendations For esoftpro Online Contact...
PT-2011-1916
Name of the Vulnerable Software and Affected Versions YourFreeWorld Banner Management affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in the trackads.php file...
PT-2011-1905
Name of the Vulnerable Software and Affected Versions Wiki Web Help version 0.28 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "handlers/getpage.php" file. Recommendations For Wiki Web Help version 0.28,...
PT-2011-1918
Name of the Vulnerable Software and Affected Versions iScripts CyberMatch version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "profile.php" file. Recommendations For iScripts CyberMatch version 1.0, avoid using...
CVE-2010-4983: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4970: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4969: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in articlesdetails.php in BrotherScripts BS Business Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4981: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4974: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in info.php in BrotherScripts BS and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5001: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2011-1909
Name of the Vulnerable Software and Affected Versions BrotherScripts BS and ScriptsFeed Auto Dealer affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "info.php" file. Recommendations At the...