CVE-2008-0026: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Unified CallManager/Communications Manager CUCM 5.0/5.1 before 5.13a and 6.0/6.1 before 6.11a allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the 1 admin and 2 user interface pages...

CVE-2007-6616

CVE-2007-6616 describes a Cross-site Scripting (XSS) flaw in SimpleForum, exploitable via the searchkey parameter in the search action of simpleforum.cgi. Affected software includes SimpleForum 4.6.2 and earlier releases. The vulnerability allows remote attackers to inject arbitrary web script or...

CVE-2006-6859: Undefined Security Weakness

SQL injection vulnerability in coupondetail.asp in Website Designs For Less Click N' Print Coupons 2005.01 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-5640

SQL injection vulnerability in guestbookview.asp in Techno Dreams Guest Book 1.0 earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-5640: Undefined Security Weakness

SQL injection vulnerability in guestbookview.asp in Techno Dreams Guest Book 1.0 earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-5641: Undefined Security Weakness

SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote attackers to execute arbitrary SQL commands via the key parameter...

Techno Dreams Guestbook 1.0 (key) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Techno Dreams Guestbook 1.0 key Remote SQL Injection Vulnerability ==================================================================== Title : Techno Dreams Guestbook v1...

CVE-2006-5184: Undefined Security Weakness

SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid...

CVE-2006-4891: Undefined Security Weakness

SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-4892: Undefined Security Weakness

SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-2993: Undefined Security Weakness

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...

CVE-2006-1841: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in boastMachine bMachine 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field...

CVE-2006-0546

Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in t...

CVE-2006-0546: Undefined Security Weakness

Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in t...

CVE-2004-1939: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes %252F in the key parameter...

CVE-2004-1562: Undefined Security Weakness

SQL injection vulnerability in redirurl.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2004-0289: Undefined Security Weakness

Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service segmentation fault via a database file that contains a large key parameter...