CVE-2008-2673: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the shownews parameter...

CVE-2008-2676: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the iJoomla News Portal comnewsportal component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

TNT Forum 0.9.4 Local File Inclusion Vulnerabilities

No description provided by source. ====================================================== TNT Forum 0.9.4 Local File Inclusion Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

tntforum-lfi.txt

====================================================== TNT Forum 0.9.4 Local File Inclusion Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Insanely Simple Blog 0.5 (index) Remote SQL Injection Vulnerabilities

No description provided by source. / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | |&nbsp...

Sql injection

SQL injection vulnerability in login.php in OtomiGenX 2.2 allows remote attackers to execute arbitrary SQL commands via the userAccount parameter aka the User Name field to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-2637

Multiple cross-site scripting XSS vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via quotes in 1 the cssexceptions parameter in vdesk/admincon/webyfiers.php and 2 the sqlmatchscope parameter in...

CVE-2008-2629

SQL injection vulnerability in the LifeType formerly pLog module for Drupal allows remote attackers to execute arbitrary SQL commands via the albumId parameter in a ViewAlbum action to index.php...

CVE-2008-2629

SQL injection vulnerability in the LifeType formerly pLog module for Drupal allows remote attackers to execute arbitrary SQL commands via the albumId parameter in a ViewAlbum action to index.php...

CVE-2008-2627: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the IDoBlog comidoblog component b24 and earlier and 1.0, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the userid parameter in a userblog action to index.php...

CVE-2008-2630: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JooBlog comjb2 component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter in a category action to index.php...

CVE-2008-2637: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via quotes in 1 the cssexceptions parameter in vdesk/admincon/webyfiers.php and 2 the sqlmatchscope parameter in...

TNT Forum 0.9.4 - Local File Inclusion

TNT Forum 0.9.4 - Local File Inclusion ====================================================== TNT Forum 0.9.4 Local File Inclusion Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking...

CVE-2008-2651: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Joomla! Bulletin Board aka Joo!BB or comjoobb component 0.5.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the forum parameter in a forum action to index.php...

CVE-2008-2628: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the eQuotes comequotes component 0.9.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2008-2633: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the EXP JoomRadio comjoomradio component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 showradio or 2 showvideo action to index.php...

TNT Forum 0.9.4 - Local File Inclusion

====================================================== TNT Forum 0.9.4 Local File Inclusion Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

CVE-2008-2563

Multiple cross-site scripting XSS vulnerabilities in 1 dspmain.php and 2 dsptaskeditor.php in SamTodo 1.1 allow remote attackers to inject arbitrary web script or HTML via the a tid parameter in a main.taskeditor edit action, and the b completed parameter in a main.default action, to index.php...

CVE-2008-2563

Multiple cross-site scripting XSS vulnerabilities in 1 dspmain.php and 2 dsptaskeditor.php in SamTodo 1.1 allow remote attackers to inject arbitrary web script or HTML via the a tid parameter in a main.taskeditor edit action, and the b completed parameter in a main.default action, to index.php...

CVE-2008-2566: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to 1 index.php or 2 the default URI...