11873 matches found
CVE-2008-5321
The CVE-2008-5321 entry describes a SQL injection in the GesGaleri module (index.php) for XOOPS, exploitable via an input parameter (the none parameter is cited as the injection point). A remote attacker could execute arbitrary SQL commands according to the description and CVSS metrics (base scor...
CVE-2008-5323
Cross-site scripting XSS vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2008-5323
The CVE-2008-5323 issue affects Wysi Wiki Wyg 1.0, where index.php is vulnerable to Cross-site Scripting (XSS). An attacker can remotely inject arbitrary script/HTML via the s parameter, with a CVSSv2 base score of 4.3 (Medium): confidentiality impact None, integrity impact Partial, availability ...
CVE-2008-5323: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML via the s parameter...
CVE-2008-5322: Exposure of Sensitive Information to an Unauthorized Actor
Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function...
CVE-2008-5321: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the no parameter...
CVE-2008-3058: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote attackers to execute arbitrary SQL commands via the FormValueEmail parameter aka Email field to index.php in 1 member/, 2 client/, or 3 admin/; or 4 the FormValueSearchKeywords...
CVE-2008-5309
SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in the resendemail module to index.php...
CVE-2008-5306
An SQL injection vulnerability exists in PG Real Estate Solution: admin/index.php accepts the login_lg (username) parameter in a way that allows remote attackers to execute arbitrary SQL commands. The issue is tied to the login handling code and carries a CVSS v2 base score of 7.5 (HIGH) with par...
CVE-2008-5307
CVE-2008-5307: A SQL injection vulnerability exists in admin/index.php of the PG Roommate Finder Solution, exploitable via the login_lg parameter. The flaw enables remote attackers to execute arbitrary SQL commands. The NVD entry notes this as a high-severity issue (CVSSv2 base score 7.5; AV:N/AC...
CVE-2008-5309: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in the resendemail module to index.php...
CVE-2008-5308: Undefined Security Weakness
The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php...
CVE-2008-5306: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter username. NOTE: some of these details are obtained from third party information...
CVE-2008-5307: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-5293
SQL injection vulnerability in index.php in WebStudio eHotel allows remote attackers to execute arbitrary SQL commands via the pageid parameter...
CVE-2008-5294
SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL commands via the pageid parameter...
CVE-2008-5295
SQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL commands via the showemp parameter...
Sql injection
SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL commands via the pageid parameter...