CVE-2008-2494: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter...

CVE-2008-2483: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the op parameter...

CVE-2008-2484: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the email parameter...

CVE-2008-2498: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 articleid and 2 mcname parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-2456

CVE-2008-2456 affects ComicShout 2.5 and earlier. The vulnerability is an SQL injection in index.php via the comic_id parameter, enabling remote execution of arbitrary SQL commands. No remediation details are provided in the supplied documents; exploitation information is referenced (Exploit-DB l...

CVE-2008-2454: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the xsstream-dm comxsstream-dm component 0.01 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the movie parameter to index.php...

CVE-2008-2456: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ComicShout 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the comicid parameter...

CVE-2008-2449: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gallery parameter to a index.php and b image.php, and the 2 imgnum parameter to image.php. NOTE: the provenance of this information is...

CVE-2008-2461: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Netious CMS 0.4 allows remote attackers to execute arbitrary SQL commands via the pageid parameter, a different vector than CVE-2006-4047...

CVE-2008-2458: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter...

dzoic handshakes sql injection >> index.php on $fname

By :s3rv3rhack3rAli Jasbi From hackerz.ir vendro : dzoic.com version : all risk : high bug : http://Victim/dzoic/index.php?handler=search&action=perform&searchtype=members&fname=Sql...

CVE-2008-2425

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the letter parameter in a Search action, a different vector than CVE-2008-2416. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2008-2422

SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-2425

CVE-2008-2425 : FicHive 1.0 – SQL injection in index.php allowing remote attackers to execute arbitrary SQL via the letter parameter in a Search action. This entry notes a different vector than CVE-2008-2416 (category parameter in Fiction action). No remediation details are provided in the connec...

CVE-2008-2422: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-2425: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the letter parameter in a Search action, a different vector than CVE-2008-2416. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

Sql injection

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter in a Fiction action, possibly related to sources/fiction.class.php...

CVE-2008-2411

SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a details action...

CVE-2008-2411

CVE-2008-2411 concerns SQL injection in SazCart 1.5.1 and earlier, via the prodid parameter in the details action of index.php when magic_quotes_gpc is disabled. The affected product is SazCart, version 1.5.1 and earlier. Root cause: improper handling of user-supplied prodid leading to SQL comman...

CVE-2008-2416

Summary of CVE-2008-2416: FicHive 1.0 is vulnerable to a SQL injection in index.php triggered by the category parameter in a Fiction action (likely related to sources/fiction.class.php). This allows remote attackers to craft arbitrary SQL, enabling potential data disclosure or modification. The v...