9763 matches found
CVE-2010-1497
Cross-site scripting XSS vulnerability in downloadproc.php in dlstats before 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2010-1498: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in dlstats before 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 download.php and 2 viewfile.php...
CVE-2010-1499: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in genreartists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1497: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in downloadproc.php in dlstats before 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2009-4807: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 c parameter to index.php and the 2 id parameter to view.php...
CVE-2010-1477: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the SermonSpeaker comsermonspeaker component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a latestsermons action to index.php...
Sql injection
SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. NOTE: some of these details are obtained from third party information...
CVE-2010-1372: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
CVE-2010-1365: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...
CVE-2010-1368: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in GameScript GS 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action...
CVE-2010-1364: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. NOTE: some of these details are obtained from third party information...
CVE-2010-1350: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the JP Jobs comjpjobs component 1.4.1 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...
CVE-2009-4751
CVE-2009-4751 pertains to a SQL injection in Swinger Club Portal, specifically in the anzeige r/start.php when handling the id parameter in a rubrik action. This allows remote execution of arbitrary SQL commands. The issue is documented with a CVSS v2 base score of 7.5 ( HIGH ), but the provided ...
CVE-2009-4751: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action...
CVE-2010-1111
Multiple cross-site scripting XSS vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to joke.php and the 2 searchingred parameter to results.php...
CVE-2010-1111: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to joke.php and the 2 searchingred parameter to results.php...
CVE-2010-1094
SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1089
SQL injection vulnerability in vedifaq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...