9083 matches found
CVE-2006-4350: Undefined Security Weakness
SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-4300
SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-4300
SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-4300: Undefined Security Weakness
SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-4284: Undefined Security Weakness
SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-4122: Undefined Security Weakness
Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php...
CVE-2006-4064: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it was later reported reported that 2.0 is also affected...
CVE-2006-3881: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI. NOTE: the id parameter in index.php, and the type and show parameters in a top action, are already...
CVE-2006-3832: Undefined Security Weakness
SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3763: Undefined Security Weakness
SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3688: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3525: Undefined Security Weakness
SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3518: Undefined Security Weakness
SQL injection vulnerability in SayfalaAltList.asp in Webvizyon Portal 2006 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2006-3364
SQL injection vulnerability in index.php in the NPSEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3364: Undefined Security Weakness
SQL injection vulnerability in index.php in the NPSEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3385: Undefined Security Weakness
Cross-site scripting XSS vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject arbitrary web script or HTML via the 1 id and 2 disabled parameters...
CVE-2006-3347: Undefined Security Weakness
SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3236: Undefined Security Weakness
Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a index.php or b printarticle.php, and the 2 catid parameter in index.php...
CVE-2006-3213
SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspecified script, possibly host/yenihost.asp...
CVE-2006-3213
CVE-2006-3213 affects WeBBoA Hosting 1.1. A SQL injection vulnerability exists in the handling of the id parameter to an unspecified script (potentially host/yeni_host.asp), allowing remote attackers to execute arbitrary SQL commands. The issue arises from improper input handling in the vulnerabl...