128 matches found
Sql injection
SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script aka ZeeReviews allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2008-3669
SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script aka ZeeReviews allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2008-3669
The CVE-2008-3669 entry concerns ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (aka ZeeReviews). Affected component: comments.php. Root cause: SQL injection via the ItemID parameter. Impact: remote attacker could execute arbitrary SQL commands, enabling data access/manipul...
CVE-2008-0606
SQL injection vulnerability in index.php in the Shambo2 comshambo2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter...
Sql injection
Multiple SQL injection vulnerabilities in MeGaCheatZ 1.1 allow remote attackers to execute arbitrary SQL commands via the ItemID parameter to 1 comments.php, 2 view.php, 3 siteadmin/ViewItem.php, and unspecified other vectors...
CVE-2007-4604
SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
Sql injection
SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2007-4604
SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2007-4604
CVE-2007-4604 affects DL PayCart 1.01, with a SQL injection in viewitem.php via the ItemID parameter. The underlying issue is unsafely constructed SQL queries that allow remote attackers to execute arbitrary SQL commands. Available references confirm the vulnerability description but do not provi...
Cross site scripting
Cross-site scripting XSS vulnerability in modlettermansubscribe.php in the Letterman Subscriber modletterman before 1.2.5 module for Joomla! allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter...
CVE-2007-3249
Cross-site scripting XSS vulnerability in modlettermansubscribe.php in the Letterman Subscriber modletterman before 1.2.5 module for Joomla! allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter...
CVE-2007-3249
Cross-site scripting XSS vulnerability in modlettermansubscribe.php in the Letterman Subscriber modletterman before 1.2.5 module for Joomla! allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter...
CVE-2007-0687
SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter...
CVE-2006-6206
SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2006-6206
SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2006-6206
CVE-2006-6206 affects WarHound General Shopping Cart, where an SQL injection vulnerability exists in item.asp via the ItemID parameter. The underlying issue allows remote attackers to execute arbitrary SQL commands. Documentation provides no explicit patch/version or mitigation steps; exploitatio...
CVE-2006-5955
SQL injection vulnerability in listings.asp in 20/20 DataShed aka Real Estate Listing System allows remote attackers to execute arbitrary SQL commands via the itemID parameter. NOTE: some of these details are obtained from third party information...
CVE-2006-5955
Affected software: 20/20 DataShed (Real Estate Listing System). Vulnerable component: listings.asp (CVE-2006-5955) with vulnerability exposed via the itemID parameter, enabling SQL commands to be executed remotely. Related entry CVE-2006-6067 documents additional vectors (itemID to f-email.asp an...
Sql injection
Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the OrderID parameter in a shipping.cfm and b checkout.cfm, 2 ItemID parameter in c proddetail.cfm, 3 SubCatID parameter in d index.cfm, the 4 CategoryID parameter ...