Vibro-School-CMS (nID) Remote SQL injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Vibro-School-CMS nID Remote SQL injection Vulnerability ========================================================= ! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO...

Vibro-School-CMS - 'nID' SQL Injection

! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! OO Prou...

Sql injection

Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via 1 the nid parameter to index.php in a View action to the News module; 2 the vid parameter to index.php in a Result action to the Voting module; 3 the fid parameter t...

CVE-2008-2394

CVE-2008-2394 affects TAGWORX.CMS 3.00.02. The vulnerability is described as multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the following parameters: (1) cid in contact.php and (2) nid in news.php. This is documented across multiple sources (NVD, CV...

CVE-2008-0253: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in fulltext.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2007-1248: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 uid, and 3 nid parameters to a news.php, and the nid parameter to b rating.php...

CVE-2006-6778

CVE-2006-6778 is an XSS vulnerability in TimberWolf 1.2.2, exposed via shownews.php and the nid parameter. The affected component is the shownews.php endpoint of TimberWolf 1.2.2, allowing remote attackers to inject arbitrary web script or HTML. The CVSS data from NVD indicates AV:N/AC:M/Au:N/C:P...

CVE-2006-6778: Undefined Security Weakness

Cross-site scripting XSS vulnerability in shownews.php in TimberWolf 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the nid parameter...

CVE-2006-6778

Cross-site scripting XSS vulnerability in shownews.php in TimberWolf 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the nid parameter...

Cline Communications Sql injection

Cline Communications Sql injection ------------------------------------- Site:http://www.celerondude.com/ Demo:http://www.liveelite.com/ --------------------------------- Sql injection 1,photoenlarged.php file PhotoID parameter 2,newsdetail.php file NID parameter 3,staffphotoenlarged.php file...

CVE-2006-2763

SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 id parameter to a index.php, and the 2 nid parameter to b newsdetail.php, c emailstory.php, d thankyou.php, e printableview.php, f tellafriend.php, and g sendcomments.php. NOTE:...

CVE-2006-2678

Multiple cross-site scripting XSS vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a index.php, and the 2 nid parameter to b newsdetail.php, c emailstory.php, d thankyou.php, e printableview.php, f tellafriend.php, and...

CVE-2006-2678: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a index.php, and the 2 nid parameter to b newsdetail.php, c emailstory.php, d thankyou.php, e printableview.php, f tellafriend.php, and...

Sql injection

SQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2006-2239

SQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2006-2239: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to execute arbitrary SQL commands via the nid parameter...