CVE-2008-4086

The vulnerability CVE-2008-4086 affects Reciprocal Links Manager 1.1. Affected component: index.php. Issue: SQL injection via the site parameter in an open action, enabling remote attackers to execute arbitrary SQL commands. According to the sources, the CVSS v2 base score is 7.5 (HIGH) with netw...

CVE-2008-4091

CVE-2008-4091 describes an SQL injection vulnerability in the web directory script’s index.php (version 1.5.3). The issue allows remote attackers to inject arbitrary SQL via the site parameter in an open action, enabling potentially unauthorized database queries. The available documents confirm t...

CVE-2008-4083

Cross-site scripting XSS vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4083

The CVE-2008-4083 entry documents a Cross-site Scripting (XSS) vulnerability in the Bookmarks plugin for Brim 2.0. The issue arises when an authenticated user adds an item via index.php, with the name parameter not properly sanitized, allowing arbitrary web script or HTML to be injected. Affected...

CVE-2008-4072

CVE-2008-4072 affects phsBlog 0.2 via SQL injection in index.php, exploitable through the sid parameter (pickup action) or the sql_cid parameter. The root cause, as stated, is unsafe SQL construction allowing remote attackers to insert arbitrary SQL. The connected documents do not provide concret...

CVE-2008-4073

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a DBpAGE action...

CVE-2008-4075

Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. dot dot in the topic parameter...

CVE-2008-4073

CVE-2008-4073: A SQL injection vulnerability is present in Zanfi Autodealers CMS AutOnline, exploitable via the pageid parameter in a DBpAGE action. Affected component is index.php; the vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7....

CVE-2008-4039

SQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute arbitrary SQL commands via the catpath parameter...

Sql injection

SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-4046

SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ordercode parameter in a veiworderstatus page...

dynamicmp3-xss.txt

Author : Xylitol Contact : n/a Vendor : benjamin kuz www.ben.ursux.com Version: 2.0.1 D0rks : dynamic MP3 lister 2.0.1 by benjamin kuz :: netscape users click here Public release vulnz: 10/09/08 Impact: low Stop lammer Dynamic MP3 Lister 2.0.1 1. Description: Dynamic MP3 Lister is a quick, easy w...

PHP Coupon Script 'index.php' SQL注入漏洞

BUGTRAQ ID: 30961 CNCAN ID：CNCAN-2008090306 PHP Coupon Script是一款基于PHP的WEB应用程序。 PHP Coupon Script不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Thinc4orce Marketing Group PHP Coupon Script 4.0 目前没有解决方案提供：...

MyioSoft EasyClassifields 'index.php' SQL注入漏洞

BUGTRAQ ID: 30943 CNCAN ID：CNCAN-2008090202 MyioSoft EasyClassifields是一款基于PHP的WEB应用程序。 MyioSoft EasyClassifields不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 MyioSoft EasyClassifields 3.0 目前没有解决方案提供：...

CVE-2008-3955

The provided connected records contain concrete details for CVE-2008-3955: an SQL injection vulnerability in index.php of Masir Camp E-Shop Module 3.0 and earlier. The flaw is exploitable via the ordercode parameter on the veiworderstatus page, enabling remote attackers to execute arbitrary SQL c...

CVE-2008-3945

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...

Sql injection

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...

CVE-2008-3945

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...

CVE-2008-3945

The CVE-2008-3945 entry documents a SQL injection in Words tag 1.2 affecting index.php, where the word parameter in a claim action allows remote command execution. This is corroborated by NVD, CVE List, and PRION entries referencing the same flaw with the Words tag 1.2 description. Exploitation r...