CVE-2009-3153: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 picid parameter to includes/videoad.php, 2 category parameter to linkvideoslisting.php, id parameter to 3 templates/header1.php and 4...

Sql injection

SQL injection vulnerability in lyrics.php in Bandwebsite aka Bandsite portal system 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5337

CVE-2008-5337 is a SQL injection in Bandwebsite (Bandsite portal system) 1.5, via lyrics.php id parameter. The vulnerability arises from improper handling of the id input, allowing remote execution of arbitrary SQL commands. Impact is described as partial confidentiality/integrity/availability wi...

CVE-2008-5337: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lyrics.php in Bandwebsite aka Bandsite portal system 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...