9762 matches found
CVE-2006-7089
SQL injection vulnerability in connexion.php in Ban 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1158: Undefined Security Weakness
Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...
CVE-2006-7089: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in connexion.php in Ban 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1159: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-1159
Cross-site scripting XSS vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-1151: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter to the top-level URI, possibly related to a SQL error...
CVE-2007-1122: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 and 1.01 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php, a variant of a SQL injection...
CVE-2007-1121: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php. NOTE: some of these details are obtained...
Design/Logic Flaw
Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' quote character in 1 a PHPSESSID cookie or 2 the id parameter in an article action in index.php, which reveal the path in various error messages...
CVE-2007-1102
Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' quote character in 1 a PHPSESSID cookie or 2 the id parameter in an article action in index.php, which reveal the path in various error messages...
CVE-2007-1102
Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' quote character in 1 a PHPSESSID cookie or 2 the id parameter in an article action in index.php, which reveal the path in various error messages...
CVE-2007-1102
CVE-2007-1102 affects Photostand 1.2.0. The vulnerability allows remote attackers to obtain sensitive information through the string "'" in either a PHPSESSID cookie or the id parameter in index.php’s article action, causing error messages to reveal internal paths. According to NVD, the issue yie...
CVE-2007-1102: Undefined Security Weakness
Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' quote character in 1 a PHPSESSID cookie or 2 the id parameter in an article action in index.php, which reveal the path in various error messages...
Sql injection
SQL injection vulnerability in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands via certain vectors related to the HaberDetay.asp and rss.asp components, and the id and kid parameters. NOTE: the provenance of this information is unknown; the details are obtain...
Sql injection
SQL injection vulnerability in HaberDetay.asp in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1016
CVE-2007-1016 describes a SQL injection vulnerability in the Aktueldownload Haber script, allowing remote attackers to execute arbitrary SQL commands via HaberDetay.asp/rss.asp components and the id/kid parameters. Reported details indicate the vulnerability affects the HaberDetay.asp component w...
CVE-2007-1023: Undefined Security Weakness
SQL injection vulnerability in popprofile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1022: Undefined Security Weakness
SQL injection vulnerability in hgoster.asp in Turuncu Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-1015: Undefined Security Weakness
SQL injection vulnerability in HaberDetay.asp in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands via the id parameter...