120 matches found
CVE-2010-2683
CVE-2010-2683 relates to a SQL injection in the Customer Paradigm PageDirector CMS, specifically in result.php via the sub_catid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The issue affects PageDirector CMS and is described with a CVSSv2 score of 7.5 (...
CVE-2010-2683: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the subcatid parameter...
PageDirector CMS - 'result.php' SQL Injection
/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID -----------------------------------------------------------------------...
PageDirector CMS - result.php SQL Injection
PageDirector CMS - result.php SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
CVE-2008-6108: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in result.php in Galatolo WebManager GWM 1.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject arbitrary web script or HTML via the r parameter...
CVE-2008-3587
Cross-site scripting XSS vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject arbitrary web script or HTML via the r parameter...
CVE-2008-3587
Cross-site scripting XSS vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject arbitrary web script or HTML via the r parameter...
CVE-2008-3587
The CVE-2008-3587 entry documents a Cross-site Scripting (XSS) vulnerability in the result.php page of Chris Bunting Homes 4 Sale, exploitable by supplying arbitrary web script or HTML via the r parameter. Affected software/URL entries point to a user-facing web application and the issue arises f...
CVE-2008-3587: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject arbitrary web script or HTML via the r parameter...
CVE-2008-2505
CVE-2008-2505 is a cross-site scripting (XSS) vulnerability in the web app component named result.php of Simpel Side Weblosning 1–4. The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter, enabling potential session or credential exposure depending on th...
CVE-2008-2505: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in result.php in Simpel Side Weblosning 1 through 4 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2007-2357
The CVE-2007-2357 entry describes a cross-site scripting (XSS) vulnerability in SineCMS 2.3.4, specifically in mods/Core/result.php, exploitable via the stringa parameter. Connected records (e.g., CVE-2007-6367) corroborate XSS in SineCMS 2.3.4 and earlier, via the guestbook fields, but the prima...
CVE-2007-2357: Undefined Security Weakness
Cross-site scripting XSS vulnerability in mods/Core/result.php in SineCms 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the stringa parameter...
CVE-2007-1166
SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via the surv parameter...
Sql injection
SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via the surv parameter...
CVE-2007-1166: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via the surv parameter...
Nabopoll 1.2 (result.php surv) Remote Blind SQL Injection Exploit
No description provided by source. ? Nabopoll Blind SQL Injection P0C Exploit Download: www.nabocorp.com/nabopoll/ coded by s0cratex Contact: [email protected] errorreporting0; iniset"maxexecutiontime",0; // just change the default values... $srv = "localhost"; $path = "/poll"; $port = 80;...
Nabopoll 1.2 (result.php surv) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= Nabopoll 1.2 result.php surv Remote Blind SQL Injection Exploit ================================================================= 0day.today 2018-03-01...