WordPress forumaction (PAGE_id)(user)SQL Injection

WordPress forumactionPAGEDuserSQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORK 1 : allinurl: forumaction "showprofile" DORK 2 : allinurl: pageid user "showprofile" DORK 3 : allinurl:"forum/?forumaction" showprofile&user=SQL InjectionEXPLOT EXPLOT 1...

CVE-2007-5303

CVE-2007-5303 is an XSS vulnerability affecting SnewsCMS Rus 2.1, specifically in news_page.php where the page_id parameter can be leveraged to inject arbitrary web scripts or HTML. The NVD entry documents a failed/open-based impact: confidentiality=NONE, integrity=PARTIAL, availability=NONE, wit...

CVE-2006-5917

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

CVE-2006-3919

SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via the 1 newsid, 2 tid, and 3 pageid parameters...