CVE-2008-2225

SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter to upload/admin/index.php in a search action, the 2 msgcharset and 3 msgheader9 parameters to admin/inc/header.php, and the 4 keywords...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 msgadminheader, 2 msgadminheader2, 3 msgadminheader3, 4 msgadminheader4, and unspecified other parameters to admin/inc/header.php; the 5 msgscript3 and...

Sql injection

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php...

Sql injection

SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album parameter in an album action...

CVE-2008-2208

SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action...

CVE-2008-2207

The CVE-2008-2207 entry covers a Cross-site Scripting (XSS) vulnerability in Maian Gallery 2.0, specifically in admin/index.php where the keywords parameter of a search action can be exploited to inject arbitrary script/HTML by an unauthenticated remote attacker. The affected component is Maian G...

CVE-2008-2205

CVE-2008-2205 describes an SQL injection in Maian Music 1.1: the vulnerable component is index.php handling the album action, where the album parameter is exploitable. The underlying cause is unsanitized user input that is used to compose SQL queries, enabling remote attackers to execute arbitrar...

CVE-2008-2207: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/index.php in Maian Gallery 2.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...

CVE-2008-2225: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId parameter...

CVE-2008-2212: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 msgadminheader, 2 msgadminheader2, 3 msgadminheader3, 4 msgadminheader4, and unspecified other parameters to admin/inc/header.php; the 5 msgscript3 and...

CVE-2008-2190: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Online Rent aka Online Rental Property Script 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it was later reported that 5.0 and earlier are also affected...

CVE-2008-2200: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter to admin/index.php in a blogs search action, the 2 msgcharset and 3 msgheader9 parameters to admin/inc/header.php, and the 4 keywords...

CVE-2008-2208: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action...

CVE-2008-2197: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php...

CVE-2008-2205: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album parameter in an album action...

Sql injection

Multiple SQL injection vulnerabilities in SMartBlog aka SMBlog 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 mois, 2 an, 3 jour, and 4 id parameters to index.php, and the 5 login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of...

CVE-2008-2183

SQL injection vulnerability in index.php in SMartBlog aka SMBlog 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter...

CVE-2008-2184

Multiple SQL injection vulnerabilities in SMartBlog aka SMBlog 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 mois, 2 an, 3 jour, and 4 id parameters to index.php, and the 5 login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of...

CVE-2008-2183

SQL injection vulnerability in index.php in SMartBlog aka SMBlog 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter...