Sql injection

SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions aka PHPAuctionSystem allows remote attackers to execute arbitrary SQL commands via the auctionid parameter, a different vector than CVE-2009-0106...

CVE-2008-6663

PHPAuctions.info/PHPAuctionSystem shows a SQL injection vulnerability in profile.php. The affected component is the profile handling (profile.php) with input via auction_id (and related CVE entries also cite user_id). The root cause is improper handling of input leading to arbitrary SQL execution...

CVE-2008-6663

SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions aka PHPAuctionSystem allows remote attackers to execute arbitrary SQL commands via the auctionid parameter, a different vector than CVE-2009-0106...

BlogMan 0.45 Multiple Vulnerabilities

Salvatore "drosophila" Fresta Application: BlogMan http://sourceforge.net/projects/blogman/ Version: 0.45 Bug: Multiple SQL Injection Authentication Bypass Privilege Escalation Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta...

CVE-2008-6110

Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper validation of parameters to profile.php...

Input validation

Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper validation of parameters to profile.php...

CVE-2008-6110

CVE-2008-6110 : The vulnerability is described as an unspecified issue in SemanticScuttle before 0.90 related to improper validation of parameters to profile.php . The connected sources (Red Hat CVE entry, NVD/NVD listing, CVE registry, PRION, CVE List) reiterate the same description with unknown...

CVE-2008-6110

Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper validation of parameters to profile.php...

Flax Article Manager 1.1 Remote PHP Script Upload Vulnerability

Exploit for unknown platform in category web applications =============================================================== Flax Article Manager 1.1 Remote PHP Script Upload Vulnerability =============================================================== Flax Article Manager 1.1 Remote File Upload...

CVE-2009-0107

Cross-site scripting XSS vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2009-0106

SQL injection vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

Sql injection

SQL injection vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-0107

Cross-site scripting XSS vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2009-0107

PHPAuctions (PHPAuctionSystem) is affected by a Cross-site Scripting (XSS) vulnerability in profile.php where the user_id parameter can be exploited to inject arbitrary web script or HTML. Affected component: profile.php in PHPAuctions. Root cause: unsanitized user_id input enabling script/HTML i...

CVE-2009-0106

SQL injection vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to execute arbitrary SQL commands via the userid parameter...

PHPAuctionSystem (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. PHPAuctionSystem Author:x0r Email:[email protected] Cms:PhpAuctionSystemvnew Cmsprice:$59.99 Demo:http://www.phpauctions.info/demo/ BugIn:\profile.phpBlind\Normal Sql Injection ExploitBlind: profile.php?userid=29%20and%20substring@@version,1,1=5--...

PHPAuctionSystem - Cross-Site Scripting SQL Injection

PHPAuctionSystem - Cross-Site Scripting SQL Injection PHPAuctionSystem Author:x0r Email:[email protected] Cms:PhpAuctionSystemvnew Cmsprice:$59.99 Demo:http://www.phpauctions.info/demo/ BugIn:\profile.phpBlind\Normal Sql Injection ExploitBlind:...

Unfixed XSS vulnerability at www.lerciamaio.altervista.org

Security researcher r080cy90r, has submitted on 11/05/2008 a cross-site-scripting XSS vulnerability affecting www.lerciamaio.altervista.org, which at the time of submission ranked 236 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/05/2008. ...

CVE-2008-4642

SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...