CVE-2008-4086: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

CVE-2008-4039

SQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute arbitrary SQL commands via the catpath parameter...

Sql injection

SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-4046

SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ordercode parameter in a veiworderstatus page...

dynamicmp3-xss.txt

Author : Xylitol Contact : n/a Vendor : benjamin kuz www.ben.ursux.com Version: 2.0.1 D0rks : dynamic MP3 lister 2.0.1 by benjamin kuz :: netscape users click here Public release vulnz: 10/09/08 Impact: low Stop lammer Dynamic MP3 Lister 2.0.1 1. Description: Dynamic MP3 Lister is a quick, easy w...

CVE-2008-4039: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute arbitrary SQL commands via the catpath parameter...

CVE-2008-4053: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 catid, and 3 view parameters...

CVE-2008-4046: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

PHP Coupon Script 'index.php' SQL注入漏洞

BUGTRAQ ID: 30961 CNCAN ID：CNCAN-2008090306 PHP Coupon Script是一款基于PHP的WEB应用程序。 PHP Coupon Script不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Thinc4orce Marketing Group PHP Coupon Script 4.0 目前没有解决方案提供：...

MyioSoft EasyClassifields 'index.php' SQL注入漏洞

BUGTRAQ ID: 30943 CNCAN ID：CNCAN-2008090202 MyioSoft EasyClassifields是一款基于PHP的WEB应用程序。 MyioSoft EasyClassifields不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 MyioSoft EasyClassifields 3.0 目前没有解决方案提供：...

CVE-2008-3955

The provided connected records contain concrete details for CVE-2008-3955: an SQL injection vulnerability in index.php of Masir Camp E-Shop Module 3.0 and earlier. The flaw is exploitable via the ordercode parameter on the veiworderstatus page, enabling remote attackers to execute arbitrary SQL c...

CVE-2008-3955: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ordercode parameter in a veiworderstatus page...

CVE-2008-3954: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action...

CVE-2008-3945

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...

Sql injection

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...

CVE-2008-3945

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...

CVE-2008-3945

The CVE-2008-3945 entry documents a SQL injection in Words tag 1.2 affecting index.php, where the word parameter in a claim action allows remote command execution. This is corroborated by NVD, CVE List, and PRION entries referencing the same flaw with the Words tag 1.2 description. Exploitation r...

CVE-2008-3944: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

CVE-2008-3945: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...