Sql injection

Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands via the 1 lstid parameter to listings.php or 2 infoid parameter to index.php...

CVE-2012-5290: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands via the 1 lstid parameter to listings.php or 2 infoid parameter to index.php...

CVE-2012-5289: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 index.php or 2 gallery.php...

PT-2012-5888

Name of the Vulnerable Software and Affected Versions Plogger version 1.0 RC1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by exploiting the id parameter in the API endpoints, specifically in "index.php" or "gallery.php". Recommendations Fo...

PT-2012-5889

Name of the Vulnerable Software and Affected Versions EasyWebRealEstate affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the lstid parameter to "listings.php" or the infoid parameter to "index.php"...

23rdweb Studio SQL Injection

---------------------------------------------------------------- 23rdweb Studio SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : 23rdweb Studio SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf...

Handshakes Professional 4.1 SQL Injection

HTTPCS Advisory : HTTPCS70 Product : Handshakes Professional Version : 4.1 Date : 2012-10-01 Criticality level : Highly Critical Description : A vulnerability has been discovered in Handshakes Professional, which can be exploited by malicious people to conduct SQL injection attacks. Input passed...

CVE-2012-5234

Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

Open redirect

Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

CVE-2012-5234

Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

CVE-2012-1604

Cross-site scripting XSS vulnerability in NextBBS 0.6 allows remote attackers to inject arbitrary web script or HTML via the do parameter to index.php...

CVE-2012-0989

Cross-site scripting XSS vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2012-5228

Cross-site scripting XSS vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the testtarget parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-5228

CVE-2012-5228 is a cross-site scripting (XSS) vulnerability in admin/index.php of phplist, affecting 2.10.9 and 2.10.17 (and possibly other versions prior to 2.10.19). The issue allows remote attackers to inject arbitrary web script or HTML via the testtarget parameter. The connected documents co...

CVE-2012-5234: Improper Input Validation

Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

CVE-2012-5226: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 motclef parameter to achat/recherche.php or 2 PATHINFO to index.php...

CVE-2012-5228: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the testtarget parameter. NOTE: some of these details are obtained from third party information...

PT-2012-2994

Name of the Vulnerable Software and Affected Versions OneOrZero AIMS version 2.8.0 and possibly earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "index.php". This could potentially lead to unauthorized actions...

PT-2012-5838

Name of the Vulnerable Software and Affected Versions Peel SHOPPING versions 2.8 through 2.9 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the motclef parameter to "achat/recherche.php" or the PATH INFO to "index.php". Recommendatio...

CVE-2012-0989: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...