392 matches found
CVE-2006-0588: Undefined Security Weakness
SQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands via the 1 mid and 2 keywords parameters...
CVE-2006-0464: Undefined Security Weakness
Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary SQL commands via the 1 gotoid or 2 mid parameter...
CVE-2005-3877
Multiple SQL injection vulnerabilities in Simple Document Management System SDMS 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the 1 folderid parameter in list.php and 2 mid parameter in a view action to messages.php...
CVE-2005-3877: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Simple Document Management System SDMS 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the 1 folderid parameter in list.php and 2 mid parameter in a view action to messages.php...
CVE-2005-3092
Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...
CVE-2005-3092
Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...
CVE-2004-2474: Undefined Security Weakness
SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php...
CVE-2005-2600: Undefined Security Weakness
FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter...
CVE-2005-2587: Undefined Security Weakness
SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter...
CVE-2005-1946: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to an editentry, replyentry, or editcomment action, or 2 the mid parameter to an aboutme action...
CVE-2005-0454: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the lcat, doc, or uid parameters to index.php, or 2 the mid or bid parameters to forums.php...