CVE-2008-3119

SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-3125

CVE-2008-3125 describes an SQL injection in Mole Group Lastminute Script 4.0, exploitable via the cid parameter in index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry notes a CVSSv2 base score of 7.5 (High) with network access, low attack complexi...

CVE-2008-3124

SQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers to execute arbitrary SQL commands via the file parameter...

CVE-2008-3119: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-3129: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the 1 foreignkeyvalue parameter in the news page and 2 webpage parameter in the webpagemultiedit form...

CVE-2008-3125: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-3123: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the listingid parameter in a listings action...

CVE-2008-3133: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in BareNuked CMS 1.1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-3130: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in OpenCart 0.7.7 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname and 2 search parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-3124: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers to execute arbitrary SQL commands via the file parameter...

CVE-2008-3132: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the beamospetition combeamospetition component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pet parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a Category action to index.php...

CVE-2007-3650

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via 1 an invalid year parameter to calendar.php, reached through index.php; 2 a direct request to common.php; and 3 a mode array parameter in the query string to login.php, which reveal the installation path in vario...

Design/Logic Flaw

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via 1 an invalid year parameter to calendar.php, reached through index.php; 2 a direct request to common.php; and 3 a mode array parameter in the query string to login.php, which reveal the installation path in vario...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Farsi Script aka FaScript FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 key or 2 desc parameter to index.php, or 3 the name parameter to page.php...

joomlamygallery-sql.txt

H-T Team HouSSamix & ToXiC350 ===================================================================== Joomla Component mygallery Remote SQL Injection Exploit ===================================================================== AUTHOR : HouSSamix From H-T TeaM Script : mygallery Joomla Component...

CVE-2008-3088: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a Category action to index.php...

sispletcms-sql.txt

================================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

cmslittle-lfi.txt

====================================================================== CMS little index.php template Local File Inclusion Vulnerability ====================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

CVE-2008-3090: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in BlognPlus BURO GUN + 2.5.5 MySQL and PostgreSQL editions allow remote attackers to execute arbitrary SQL commands via the 1 p, 2 e, 3 d, and 4 m parameters, a different vulnerability than CVE-2008-2819...