CVE-2008-4623: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DS-Syndicate comds-syndicate component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feedid parameter to index2.php...

CVE-2008-4519

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

Directory traversal

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

CVE-2008-4519: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

CVE-2008-4518: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d 1.9999 d allow remote attackers to execute arbitrary SQL commands via the 1 sprache parameter to index2.php and the 2 artikel parameter to index.php...

CVE-2008-2506

Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary SQL commands via the 1 mainid and 2 id parameters to index2.php...

Sql injection

Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary SQL commands via the 1 mainid and 2 id parameters to index2.php...

CVE-2008-2506: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary SQL commands via the 1 mainid and 2 id parameters to index2.php...

Weblosninger <= v4 (XSS/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Weblosninger SQL :::::::: V1 ===== http://www.target.dk/ index2.php?id=31&mainid=-1+union+select+1,2,3,concatws0x3a3a,brugernavn,adgangskode,5,6+from+web1brugere/ V2 =====...

Unfixed Redirect vulnerability at www.gunradyotv.com

Security researcher st@rext, has submitted on 24/12/2007 a Redirect vulnerability affecting www.gunradyotv.com, which at the time of submission ranked 2017292 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/12/2007. It is currently unfixed. ...

Sql injection

SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the uname parameter, a different vector than CVE-2007-6163. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-6163: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the pword aka Password parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-6169: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the uname parameter, a different vector than CVE-2007-6163. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-5176

Multiple cross-site scripting XSS vulnerabilities in GroupLink eHelpDesk 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 NADISPLAYNAME parameter in helpdesk/user/rfcreate.jsp and the 2 username and 3 LDAPError parameters in index2.jsp. NOTE: the provenance of this...

CVE-2007-5176: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GroupLink eHelpDesk 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 NADISPLAYNAME parameter in helpdesk/user/rfcreate.jsp and the 2 username and 3 LDAPError parameters in index2.jsp. NOTE: the provenance of this...

Unfixed Redirect vulnerability at tarih.us

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting tarih.us, which at the time of submission ranked 7330054 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. If you...

Unfixed Redirect vulnerability at www.karangturi.org

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting www.karangturi.org, which at the time of submission ranked 2527778 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixe...

Unfixed XSS vulnerability at dig.tblc.org

Security researcher MaXWeL, has submitted on 03/07/2007 a cross-site-scripting XSS vulnerability affecting dig.tblc.org, which at the time of submission ranked 505965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2007. It is currently...

CVE-2007-0697

index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modified id parameter, related to templates/modif.html. NOTE: some of these details are obtained from third party information...

CVE-2007-0697

index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modified id parameter, related to templates/modif.html. NOTE: some of these details are obtained from third party information...