S-CMS newsview.asp page has a SQL injection vulnerability in the n_id parameter.

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A SQL injection vulnerability exists in the S-CMS newsview.asp page. The lack of filtering of the 'nid' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

Tugux CMS (nid) BLIND SQL Injection Vulnerability

No description provided by source. =================================================================== Tugux CMS nid BLIND sql injection vulnerability =================================================================== Software: Tugux CMS Vendor: www.tugux.com Vuln Type: BLind SQL Injection...

CVE-2014-2526: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive before 6.7 allow remote attackers to inject arbitrary web script or HTML via the 1 sForumName or 2 sDescription parameter to Forum/manage/ForumManager.lsp; 3 sHint, 4 sWord, or 5 nId parameter to Forum/manage/hangman.lsp; 6 user...

CVE-2012-2923

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

PT-2012-4369

Name of the Vulnerable Software and Affected Versions Hypermethod eLearning Server 4G Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the nid parameter in the "news.php4" endpoint. Recommendations For Hypermethod eLearning Server 4G, avoid usi...

CVE-2012-2923: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

PT-2011-1351

Name of the Vulnerable Software and Affected Versions ATCOM Netvolution version 1.0 ASP Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bpe nid parameter in the "default.asp" file. Recommendations For ATCOM Netvolution version 1.0 ASP,...

Cross site scripting

Cross-site scripting XSS vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter...

CVE-2009-2019

SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...

Sql injection

SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2009-2019: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2009-2020: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter...

Sql injection

SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...

CVE-2008-6795: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...

CVE-2008-5998: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the ajaxchecklistsave function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow remote authenticated users, with "update ajax checklists" permissions, to execute arbitrary SQL commands via a save operation, related to the 1 nid, 2 qid, and...

Vibro-School-CMS (nID) Remote SQL injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Vibro-School-CMS nID Remote SQL injection Vulnerability ========================================================= ! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO...

Vibro-School-CMS - 'nID' SQL Injection

! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! OO Prou...

Sql injection

Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via 1 the nid parameter to index.php in a View action to the News module; 2 the vid parameter to index.php in a Result action to the Voting module; 3 the fid parameter t...

CVE-2008-2394

CVE-2008-2394 affects TAGWORX.CMS 3.00.02. The vulnerability is described as multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the following parameters: (1) cid in contact.php and (2) nid in news.php. This is documented across multiple sources (NVD, CV...

CVE-2008-0253: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in fulltext.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands via the nid parameter...