13398 matches found
CVE-2010-5059: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action...
CVE-2010-5055: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5061: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in RSStatic allows remote attackers to execute arbitrary SQL commands via the maxarticles parameter...
CVE-2010-5048: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin.jcomments.php in the JoomlaTune JComments comjcomments component 2.1.0.0 for Joomla! allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to index.php...
CVE-2010-5056: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the GBU Facebook comgbufacebook component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the faceid parameter in a showface action to index.php...
PT-2011-1996
Name of the Vulnerable Software and Affected Versions RSStatic affected versions not specified Description A SQL injection issue exists in index.php, allowing remote attackers to execute arbitrary SQL commands via the maxarticles parameter in the "/index.php" endpoint. Recommendations At the...
PT-2011-1990
Name of the Vulnerable Software and Affected Versions Almnzm version 2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "index.php" endpoint. Recommendations For Almnzm version 2.1, avoid using the id parameter in the...
phpMyAdmin Setup Interface Cross Site Scripting Vulnerability
phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
phpcms 2008 index.php 跨站脚本攻击漏洞
No description provided by source...
phpcms V9 BLind SQL 注入漏洞
No description provided by source. http://eidelweiss-advisories.blogspot.com/2011/01/phpcms-v9-blind-sql-injection.html ! index.php?m=content&c=rss&catid=valid catid Example p0c ! http://host/index.php?m=content&c=rss&catid=10 = True ! http://host/index.php?m=content&c=rss&catid=-10 = False +...
Digital Attic SQL Injection Vulnerability
Exploit for php platform in category web applications Title : Digital Attic SQL Injection Vulnerability Vendor Link: : http://www.digitalattic.com/ Author : tempemendoan Contact : anu :D Google Dork : inurl:"gorengan tempe" intext:"CMS by Digital Attic" === POC === ? http://website/index.php?id=S...
DLGuard 'index.php' Cross Site Scripting Vulnerability
DLGuard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal...
Plum CMS Blind SQL Injection
Coder : baltazar a.k.a b4ltazar CMS name : Plum CMS Site : http://www.plum-design.net && http://www.plum.rs Dork : Powered by PlumDesign : Powered by PlumDesign site:.rs : Powered by PlumDesign site:.com Admin panel : N/A Vulnerability : Sites design with Plum CMS suffers from blind SQL injection...
Joomla 'Teams' Component SQLi Vulnerability (Nov 2011)
Joomla with Teams component is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2010-5043
SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...
CVE-2010-5020
SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2010-5006
SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter...
CVE-2010-5032
SQL injection vulnerability in the BF Quiz combfquiztrial component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php...
