7218 matches found
Sql injection
Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the 1 i parameter or 2 v parameters in a register action...
CVE-2009-3665
Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the 1 i parameter or 2 v parameters in a register action...
CVE-2009-3667
CVE-2009-3667 affects AdsDX 3.05. A SQL injection in admin/index.php via the Username parameter allows remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation/escaping enabling injection. Impact per sources: attacker could potentially access/modify data (part...
QuickCart 3.x xss xsrf Local File Inclusion Directory Traversal
No description provided by source. DISCOVERED: PaweÅ‚ 'kl3ryk' Åaskarzewski GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THIS FILE- Most of actions load templates form bad directory and then thr...
QuickCart 3.x xss xsrf Local File Inclusion Directory Traversal
No description provided by source. DISCOVERED: PaweÅ‚ 'kl3ryk' Åaskarzewski GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THIS FILE- Most of actions load templates form bad directory and then thr...
cP Creator 'tickets' Cookie SQL Injection Vulnerability
The host is running cP Creator and is prone to SQL Injection Vulnerability OpenVAS Vulnerability Test $Id: gbcpcreatorsqlinjvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ cP Creator 'tickets' Cookie SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH...
cP Creator 'tickets' Cookie SQL Injection Vulnerability
cP Creator is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Directory traversal
Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...
CVE-2009-3529
The CVE-2009-3529 entry concerns RadScripts RadBids Gold 4. Vulnerability : SQL injection in index.php triggered by the fid parameter in a view_forum action, enabling remote attackers to execute arbitrary SQL commands. This is a different vector than CVE-2005-1074. Impact : Partial confidentialit...
CVE-2009-3506
Multiple cross-site scripting XSS vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 cookuser parameter to index.php and the 2 name parameter to modules.php...
CVE-2009-3514
Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via 1 the page parameter to index.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 2 editid and 3 p parameter in a news action to...
Sql injection
Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via 1 the page parameter to index.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 2 editid and 3 p parameter in a news action to...
CVE-2009-3494
Multiple SQL injection vulnerabilities in index.php in T-HTB Manager 0.5, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in a deletecategory action, 2 the name parameter in an updatecategory action, and other vectors...
CVE-2009-3493
Multiple cross-site scripting XSS vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 scrivi.php and 2 index.php...
CVE-2009-3494
Multiple SQL injection vulnerabilities in index.php in T-HTB Manager 0.5, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in a deletecategory action, 2 the name parameter in an updatecategory action, and other vectors...
CVE-2009-3494
The CVE describes SQL injection vulnerabilities in the web application component index.php of T-HTB Manager 0.5. The root cause is improper handling of inputs when magic_quotes_gpc is disabled, enabling remote attackers to inject arbitrary SQL commands through parameters such as id (in delete_cat...
Sql injection
SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...
CVE-2009-3361
SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands via the maincatid parameter...