CVE-2005-3961

exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...

Lore SQL inj. vuln.

Lore SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/lore-sql-inj-vuln.html Vendor:http://www.pineappletechnologies.com/products/lore/ affected version: Tested on 1.5.4 Product Description: Lore is a professional knowledge base...

CVE-2005-3930: Undefined Security Weakness

SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3961: Undefined Security Weakness

exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...

CVE-2005-3938: Undefined Security Weakness

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in 1 index.php, 2 faqqanda.php, 3 referfriend.php, 4 printarticle.php, or 5 addcomment.php...

CVE-2005-3920

SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the 1 gal parameter to index.php or 2 id parameter to comments.php...

CVE-2005-3920: Undefined Security Weakness

SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the 1 gal parameter to index.php or 2 id parameter to comments.php...

CVE-2005-3916: Undefined Security Weakness

SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action...

CVE-2005-3882

SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3882: Undefined Security Weakness

SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3859: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

CVE-2005-3853: Undefined Security Weakness

SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 category parameters to index.php...

CVE-2005-3827: Undefined Security Weakness

SQL injection vulnerability in productcat in AgileBill 1.4.92 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Vote Caster 3.x SQL Inj. Vuln.

Vote Caster 3.x SQL Inj. Vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/vote-caster-3x-sql-inj-vuln.html Vendor:http://www.comdevweb.com/ Product link:http://www.comdevweb.com/votecaster.php affected version: 3.1 and prior. Vuln. Description:...

CVE-2004-2562: Undefined Security Weakness

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises LBE Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3744: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php...

CVE-2005-3555: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the 1 editattributes or 2 admin page...

CVE-2005-3638: Undefined Security Weakness

Cross-site scripting XSS vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in profile.php and 2 titles of posts...

CVE-2005-3575: Undefined Security Weakness

SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3515: Undefined Security Weakness

Cross-site scripting XSS vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject arbitrary web script or HTML via the ID parameter...