CVE-2007-4956

Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the pseudo parameter to login.php, 2 the id parameter to index.php in a carnet editer action in the MemberSpace espacemembre module, or 3 the typenav parameter to index.php in a...

Sql injection

SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a play ac action to index.php. NOTE: some details are obtained from third party information...

CVE-2007-4919: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in JBlog 1.0 allow 1 remote attackers to execute arbitrary SQL commands via the id parameter to index.php, and allow 2 remote authenticated administrators to execute arbitrary SQL commands via the id parameter to admin/modifpost.php...

CVE-2007-4922: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a play ac action to index.php. NOTE: some details are obtained from third party information...

AuraCMS ID参数SQL注入漏洞

AuraCMS是一款基于PHP的WEB应用程序。 AuraCMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 0 Aura CMS 1.5rc 目前没有详细解决方案提供： a href="http://www.auracms.org/index.php" target="blank"http://www.auracms.org/index.php/a...

CVE-2007-4835: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action...

CVE-2007-4837: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in anket.asp in Proxy Anket 3.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4846: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in start.php in Webace-Linkscript wls 1.3 Special Edition SE allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik go action...

CVE-2007-4836: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an edit action...

Sql injection

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 hal.php, 2 cetak.php, 3 lihat.php, 4 pesan.php, and 5 teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to t...

CVE-2007-4804: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 hal.php, 2 cetak.php, 3 lihat.php, 4 pesan.php, and 5 teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to t...

Sql injection

SQL injection vulnerability in errorview.php in Yvora 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2007-4714

SQL injection vulnerability in errorview.php in Yvora 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2007-4719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in read.php in 212cafeBoard 6.30 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4714: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in errorview.php in Yvora 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Sql injection

SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4611

SQL injection vulnerability in viewevent.php in Moonware aka Dale Mooney Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in viewevent.php in Moonware aka Dale Mooney Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4602

SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS Micro-CMS 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4611: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewevent.php in Moonware aka Dale Mooney Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter...