CVE-2009-4673

CVE-2009-4673 concerns a SQL injection in profile.php of the Mole Group Adult Portal Script, exploitable via the user_id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands (impact: partial confidentiality, integrity, and availability according to NVD). Public r...

CVE-2009-4673: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

phpMDJ 1.0.3 SQL Injection

,------------------------, Author : k4cp3r/Ablus ^ Date : 05.01.2010 ^ '------------------------' ,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download : http://www.weboac.be/phpmdj/docs/phpmdj1.0.3.zip \ Vulnerability : Remote Sql Injection ...

phpMDJ 1.0.3 - SQL Injection

,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download : http://www.weboac.be/phpmdj/docs/phpmdj1.0.3.zip \ Vulnerability : Remote Sql Injection \ '--------------------------------------------------------------'...

phpMDJ 1.0.3 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================== phpMDJ 1.0.3 SQL Injection Vulnerability ======================================== ,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download :...

phpMDJ 1.0.3 - SQL Injection

phpMDJ 1.0.3 - SQL Injection ,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download : http://www.weboac.be/phpmdj/docs/phpmdj1.0.3.zip \ Vulnerability : Remote Sql Injection \ '--------------------------------------------------------------'...

Sql injection

SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2009-4560

SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2009-4560: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands via the name parameter...

phpbb 2.0.14 profile.php 跨站脚本漏洞

No description provided by source...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net Ez Poll Hoster EPH allow remote attackers to inject arbitrary web script or HTML via the 1 pid parameter in a code action to index.php and the 2 uid parameter in a view action to profile.php...

CVE-2009-4384: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net Ez Poll Hoster EPH allow remote attackers to inject arbitrary web script or HTML via the 1 pid parameter in a code action to index.php and the 2 uid parameter in a view action to profile.php...

CVE-2009-3949: Undefined Security Weakness

cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password, and confpassword parameters...

MyMsg 'profile.php' SQL Injection Vulnerability

MyMsg is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MyMsg 'profile.php' SQL Injection Vulnerability

This host is installed with MyMsg and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmymsgprofilesqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ MyMsg 'profile.php' SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2009-3528

SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action...

Sql injection

SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action...

CVE-2009-3528

SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action...

CVE-2009-3528

MyMsg 1.0.3 is vulnerable in profile.php (SQL injection) via the uid parameter in a show action. The OpenVAS entries confirm a remote-authenticated SQLi flaw that could allow arbitrary SQL execution. Impact is partial confidentiality, integrity, and availability, with a CVSS v2 base score of 6.5 ...

CVE-2009-3528: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action...