CVE-2008-4900

SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-4879...

Sql injection

SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in products.php in 1st News 4 Professional PR 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4895

SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4900: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4895: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4890

SQL injection vulnerability in products.php in 1st News 4 Professional PR 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4887: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter in a 1 profile page profile.php or 2 game page game.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4881: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4882: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4890: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in products.php in 1st News 4 Professional PR 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4885: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4884: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4880: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-4879...

CVE-2008-4883: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4802: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4782

SQL injection vulnerability in public/code/cppollsresults.php in All In One Control Panel AIOCP 1.4 allows remote attackers to execute arbitrary SQL commands via the pollid parameter...

Sql injection

SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...