11787 matches found
CVE-2008-1961: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMGid parameter in a comments action...
CVE-2008-1936
CVE-2008-1936 describes an SQL injection in index.php of Classifieds Caffe. The vulnerability is exploitable via the cat_id parameter in an add action, potentially allowing remote attackers to execute arbitrary SQL commands. This may be site-specific; CVSS 2.0 vector indicates network access with...
CVE-2008-1936: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the catid parameter in an add action. NOTE: this issue might be site-specific...
E RESERV 2.1 (index.php ID_loc) SQL Injection Vulnerability
No description provided by source. ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : E RESERV VERSI...
CVE-2008-1913
CVE-2008-1913 affects Lasernet CMS (versions 1.5 and 1.11) with a vulnerable index.php. When magic_quotes_gpc is disabled, an attacker can inject arbitrary SQL via the new parameter in a new action, enabling remote execution and partial impact on confidentiality/integrity/availability. The NVD li...
CVE-2008-1913: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action...
Unfixed XSS vulnerability at www.phrozen.biz
Security researcher Michael Ansel, has submitted on 22/04/2008 a cross-site-scripting XSS vulnerability affecting www.phrozen.biz, which at the time of submission ranked 7618089 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is...
WordPress <= 2.3.3 'index.php' Arbitrary File Access
Binary data 4482.prm...
AllMyGuests 0.4.1 - 'AMG_id' SQL Injection
Found by : -=Player=- Contacts : 282-246-419 ICQ Greatz to: LidlosesAuge, Suicide, enco, Free-Hack Script : AllMyGuests Site : http://www.php-resource.net/ Dork : "powered by AllMyGuests" Valnu : index.php Parameter: AMGid Injection:...
AllMyGuests <= 0.4.1 (AMG_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ AllMyGuests = 0.4.1 AMGid Remote SQL Injection Vulnerability ================================================================ Found by : -=Player=- Greatz to: LidlosesAuge,...
CVE-2008-1884: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to read arbitrary files via directory traversal sequences in the wiki parameter, a different vector than CVE-2006-4418...
CVE-2008-1893: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter...
Sql injection
SQL injection vulnerability in index.php in Terong PHP Photo Gallery aka Advanced Web Photo Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the photoid parameter...
Sql injection
SQL injection vulnerability in Blog Pixel Motion aka Blog PixelMotion allows remote attackers to execute arbitrary SQL commands via the categorie parameter to index.php, possibly related to include/requetesIndex.php...
CVE-2008-1875
Terong PHP Photo Gallery (Advanced Web Photo Gallery) 1.0 has an SQL injection in index.php via the photo_id parameter, enabling remote execution of arbitrary SQL commands. Affected component: index.php in Terong PHP Photo Gallery; root cause: unsafely constructed SQL query parameter. Impact: par...
CVE-2008-1869: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: this issue might be site-specific...
CVE-2008-1867: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Blog Pixel Motion aka Blog PixelMotion allows remote attackers to execute arbitrary SQL commands via the categorie parameter to index.php, possibly related to include/requetesIndex.php...
CVE-2008-1876: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGfilesfunctionspage parameter...
Classifieds Caffe (index.php cat_id) SQL Injection Vulnerability
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Classifieds Caffe index.php catid Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS ...
Classifieds Caffe (index.php cat_id) Remote SQL Injection
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Classifieds Caffe index.php catid Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...