8057 matches found
Blog System v1.2 SQL inj. vuln.
Blog System v1.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html vendor:http://www.netartmedia.net/blogsystem/ affected version:v1.2 and prior Product Description: Blog System allows you to launch and...
CVE-2005-3954
Cross-site scripting XSS vulnerability in blogBuddies 0.3 allows remote attackers to inject arbitrary web script or HTML via the u parameter to index.php...
CVE-2005-3930
SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-3930
The CVE-2005-3930 entry concerns N-13 News 1.2 where a vulnerability in index.php allows SQL injection through the id parameter. The underlying issue enables remote attackers to execute arbitrary SQL commands (as described in the initial record). The available documents do not specify affected ve...
CVE-2005-3958
The CVE-2005-3958 entry identifies a SQL injection vulnerability in Entergal MX 2.0, specific to index.php via the (1) idcat parameter in a showcat action and (2) the action parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The affected component is the web i...
CVE-2005-3956
DMANews 0.904 and 0.910 are affected by multiple SQL injection vulnerabilities in index.php. The flaws allow remote attackers to inject arbitrary SQL commands through (1) the id parameter in a comments action and (2) the sortorder and (3) display_num parameters in a news_list action. The provided...
CVE-2005-3956
Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a comments action and the 2 sortorder and 3 displaynum parameters in a newslist action...
CVE-2005-3954
Cross-site scripting XSS vulnerability in blogBuddies 0.3 allows remote attackers to inject arbitrary web script or HTML via the u parameter to index.php...
CVE-2005-3958
SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 idcat parameter in a showcat action and 2 the action parameter...
PT-2005-4687 · Php · Php Upload Center
Name of the Vulnerable Software and Affected Versions: PHP Upload Center affected versions not specified Description: A directory traversal issue exists in index.php, allowing remote attackers to read arbitrary files by including "../" sequences in the filename parameter of the vulnerable API...
CVE-2005-3924
SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the 1 kategorieid and 2 katid parameters...
CVE-2005-3924
CVE-2005-3924 is a SQL injection vulnerability in Randshop, specifically in themes/kategorie/index.php. The issue allows remote attackers to execute arbitrary SQL commands through the kategorieid and katid parameters. NVD lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low co...
CVE-2005-3920
SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the 1 gal parameter to index.php or 2 id parameter to comments.php...
CVE-2005-3909
CVE-2005-3909 describes an SQL injection vulnerability in the merchants/index.php file of Post Affiliate Pro 2.0.4 and earlier . The vulnerability allows remote attackers to inject arbitrary SQL via the sortorder parameter, potentially impacting confidentiality, integrity, and availability. The c...
CVE-2005-3874
SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pentry parameter in an entry command to index.php...
CVE-2005-3868
Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 term, 2 id, 3 stat, and 4 source parameters to index.php, and 5 through the image parameters with an add request...
CVE-2005-3874
CVE-2005-3874 describes an SQL injection in Netzbrett 1.5.1 and earlier caused by unsafely handling the p_entry parameter in the entry command to index.php via netzbr.php. The vulnerability allows a remote attacker to craft input that alters SQL queries, enabling arbitrary SQL command execution. ...
CVE-2005-3864
SQL injection vulnerability in SourceWell prior to or at version 1.1.2 (and conflicting reports for 1.1.3) allows remote attackers to execute arbitrary SQL commands via the cnt parameter in index.php. The issue is exploitable remotely over the network with no authentication required and can lead ...
CVE-2005-3869
The CVE-2005-3869 entry describes a Cross-site scripting (XSS) flaw in index.php of Google API Search 1.3.1 and earlier, exploitable via hex-encoded values in the REQ parameter to inject arbitrary script/HTML. Affected software: Google API Search 1.3.1 and earlier. Impact per the source: user-fac...