946 matches found
Sql injection
SQL injection vulnerability in members.php in the Members CV job module 1.0 for PHP-Fusion, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter...
Sql injection
SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter...
CVE-2009-0832
SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter...
CVE-2009-0831
SQL injection vulnerability in members.php in the Members CV job module 1.0 for PHP-Fusion, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter...
CVE-2009-0831
CVE-2009-0831 affects PHP-Fusion's Members CV (job) module 1.0. The vulnerability is an SQL injection in members.php via the sortby parameter when magic_quotes_gpc is disabled, exploitable by remote authenticated users. NVD reports a base score of 6.0 (Medium) with AV:N/AC:M/Au:S/C:P/I:P/A:P.
CVE-2009-0832
CVE-2009-0832 describes a SQL injection in the E-Cart module 1.3 for PHP-Fusion. The vulnerability exists in items.php and allows remote attackers to inject arbitrary SQL via the CA parameter. Impact, as stated, is remote execution of SQL commands with partial confidentiality, integrity, and avai...
CVE-2009-0831
SQL injection vulnerability in members.php in the Members CV job module 1.0 for PHP-Fusion, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter...
CVE-2009-0832
SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter...
CVE-2009-0832: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter...
CVE-2009-0831: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in members.php in the Members CV job module 1.0 for PHP-Fusion, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter...
CVE-2008-5946
SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
Sql injection
SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2008-5946
SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2008-5946
The CVE-2008-5946 entry concerns a SQL injection in PHP-Fusion 4.01’s readmore.php, exploitable via the news_id parameter. Affected software/component: PHP-Fusion 4.01 (readmore.php). Root cause: unsafely constructed SQL when handling news_id enables arbitrary SQL execution. Impact: remote attack...
CVE-2008-5946: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
PHP-Fusion the_kroax SQL Injection
PHP-Fusion Mod thekroax commentid SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Author by : FasTWORM +home: Cyber-Warrior.Org +exploit:...
PHP-Fusion Mod the_kroax (comment_id) SQL Injection Vulnerability
No description provided by source. PHP-Fusion Mod thekroax commentid SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Author by : FasTWORM +home: Cyber-Warrior.Org +exploit:...
PHP-Fusion Mod the_kroax (comment_id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= PHP-Fusion Mod thekroax commentid SQL Injection Vulnerability ================================================================= PHP-Fusion Mod thekroax commentid SQL Injecti...
PHP-Fusion Mod the_kroax - SQL Injection
PHP-Fusion Mod thekroax - SQL Injection PHP-Fusion Mod thekroax commentid SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Author by : FasTWORM +home: Cyber-Warrior.Org +exploit:...
PHP-Fusion Mod vArcade 1.8 Sql Injection Vulnerability
---------------------------------------------------------------- Script : PHP-Fusion Mod vArcade 1.8 Type : Sql Injection Vulnerability Risk : High ---------------------------------------------------------------- Download From : http://venue.nu/...