CVE-2007-6172: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewimage.php and 2 comments.php...

CVE-2007-6164

Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 reviews.php, 2 links.php and 3 articles.php...

CVE-2007-6164: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 reviews.php, 2 links.php and 3 articles.php...

CVE-2007-6162: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a category action...

Sql injection

Multiple SQL injection vulnerabilities in Dora Emlak 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a emlakdetay.asp and b haberdetay.asp, the 2 kategori parameter to c kategorisirala.asp, and the 3 tip parameter to d tipsirala.asp...

Directory traversal

Directory traversal vulnerability in scripts/include/showcontent.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share...

CVE-2007-6129: Improper Input Validation

Directory traversal vulnerability in scripts/include/showcontent.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share...

CVE-2007-6084: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6058: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 codes action in the profile-codes module, 2 videos action in the video-codes module, or 3 games action in the arcade-games module...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...

CVE-2007-5997

SQL injection vulnerability in campaignstats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2007-5997: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in campaignstats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2007-6004: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...

CVE-2007-5999: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in productdesc.php in Softbiz Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-5951

SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-5951

SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-5951: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-5887: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...