290 matches found
CVE-2006-5184: Undefined Security Weakness
SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid...
CVE-2006-4891: Undefined Security Weakness
SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...
CVE-2006-4892: Undefined Security Weakness
SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...
CVE-2006-2993: Undefined Security Weakness
Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...
CVE-2006-1841: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.php in boastMachine bMachine 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field...
CVE-2006-0546
Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in t...
CVE-2006-0546: Undefined Security Weakness
Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in t...
CVE-2004-1939: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes %252F in the key parameter...
CVE-2004-1562: Undefined Security Weakness
SQL injection vulnerability in redirurl.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter...
CVE-2004-0289: Undefined Security Weakness
Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service segmentation fault via a database file that contains a large key parameter...