9763 matches found
CVE-2010-1872
Cross-site scripting XSS vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...
Sql injection
Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 show.php and 2 xml.php...
CVE-2010-1872: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4862: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 show.php and 2 xml.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the 1 userId parameter to tvserver/server/user/setPermissions.jsp, 2 deptName parameter to...
CVE-2009-4848
Multiple cross-site scripting XSS vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the 1 userId parameter to tvserver/server/user/setPermissions.jsp, 2 deptName parameter to...
CVE-2010-1743
SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1725
SQL injection vulnerability in offersbuy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1743: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1744: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in product.html in B2B Gold Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1725
SQL injection vulnerability in offersbuy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1725: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in offersbuy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1726: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in offersbuy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1716: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Agenda Address Book comagenda component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...
CVE-2010-1721: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Intellectual Property aka IProperty or comiproperty component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties action to index.php...
CVE-2010-1559: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the SermonSpeaker comsermonspeaker component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a speakerpopup action to index.php. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in printraincheck.php in phpRAINCHECK 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1538: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in printraincheck.php in phpRAINCHECK 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...