95 matches found
Sql injection
Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to default.asp in a news page action or 2 the pageid parameter to default.asp...
CVE-2007-6556
Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to default.asp in a news page action or 2 the pageid parameter to default.asp...
Sql injection
SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter...
emagiC CMS.Net EMC.ASP SQL注入漏洞
emagiC CMS.Net是一款基于ASP的WEB应用程序。 emagiC CMS.Net不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'EMC.ASP'脚本对用户提交的'pageId'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 emagiC CMS.Net 4.0 目前没有详细解决方案提供： http://www.emagic-cms.com/ http://www.example.com/emc.asp?pageId=1' UNION SELECT TOP ...
Sql injection
SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...
CVE-2007-3070
Cross-site scripting XSS vulnerability in index.php in BDigital Web Solutions WebStudio allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in BDigital Web Solutions WebStudio allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...
CVE-2007-3070
Cross-site scripting XSS vulnerability in index.php in BDigital Web Solutions WebStudio allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...
CVE-2006-6157
ContentNow is affected by an SQL injection in index.php (v1.39 and earlier) that allows remote attackers to inject arbitrary SQL via the pageid parameter. The underlying issue can also expose path information when a non-existent/invalid pageid is provided. Affected product: ContentNow up to versi...
SQL injection Seir Anphin v666 Community Management System
CR Advisory1 programm: Seir Anphin v666 Community Management System bug: SQL injection home page: www.comeplaydying.com bug found: 27.07.2006 discovered by CR www.svt.nukleon.us ! Details ! ============================================================================================ index.php...
CVE-2006-3191
Cross-site scripting XSS vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...
CVE-2006-3191
CVE-2006-3191 describes a Cross-site Scripting (XSS) vulnerability in MPCS 0.2, specifically in comment.php, exploitable via the pageid parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The available sources confirm the affected software (MPCS 0.2) and the vulne...
CVE-2006-3191
Cross-site scripting XSS vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...
RahnemaCo - 'page.php' PageID Remote File Inclusion
source: https://www.securityfocus.com/bid/18490/info RahnemaCo is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker ...