Sql injection

SQL injection vulnerability in members.php in Arab Portal 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the by parameter in the msearch action...

CVE-2010-2340: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in members.php in Arab Portal 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the by parameter in the msearch action...

ArabPortal v2.2.x Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== ArabPortal v2.2.x Remote SQL Injection Vulnerability ==================================================== Software Link: http://www.arab-portal.info/download.php?action=download&fileid=127...

Sql injection

SQL injection vulnerability in includes/content/membercontent.php in BandSite CMS 1.1.4 allows remote attackers to execute arbitrary SQL commands via the memid parameter to members.php...

CVE-2009-4792: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/content/membercontent.php in BandSite CMS 1.1.4 allows remote attackers to execute arbitrary SQL commands via the memid parameter to members.php...

PHP-fusion-6-01-18 (members.php) disclosure ways

================================================ PHP-fusion-6-01-18 members.php disclosure ways ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / ...

PHP-Fusion members.php Disclosure

================================================ PHP-fusion-6-01-18 members.php disclosure ways ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

CVE-2009-2120

CVE-2009-2120 affects TekBase All-in-One 3.1, with multiple SQL injection vulnerabilities that let remote authenticated users execute arbitrary SQL commands. Affected vectors include the (1) ids parameter to admin.php and the (2) y parameter to members.php, among others. At least one vector is no...

CVE-2009-2120: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 ids parameter to admin.php, the 2 y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access...

CVE-2009-0593

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action...

Sql injection

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action...

CVE-2009-0593

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action...

CVE-2009-0593

CVE-2009-0593 : A SQL injection in plx Auto Reminder 3.7 affects members.php (newar action). Described as exploitable by remote authenticated users via the id parameter. CVSSv2 base score 6.5 (MEDIUM). No further technical details or patch/remediation information are provided in the connected doc...

CVE-2009-0593: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action...

Directory traversal

Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a .. dot dot in the dir parameter in a view action...

CVE-2008-6090: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a .. dot dot in the dir parameter in a view action...

plxAutoReminder 3.7 SQL Injection

plx Autoreminder v3.7 id R-Sql Ýnj ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 04.01.09 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : EN ONEMLi N0T: demolarI hackleyen top olsun top if...

CVE-2008-5333: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary SQL commands via the id parameter...

Nitrotech 0.0.3a (RFI/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Nitrotech 0.0.3a RFI/SQL Multiple Remote Vulnerabilities ========================================================== Name: Nitrotech 0.0.3a Multiple Remote Vulnerabilities Download:...

Cross site scripting

Cross-site scripting XSS vulnerability in members.php in Pars4u Videosharing 1 allows remote attackers to inject arbitrary web script or HTML via the PageNo parameter...