15 matches found
EUVD-2010-5001
Malware in sbrugna...
EUVD-2006-3571
Malware in sbrugna...
CVE-2012-5342
Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...
Sql injection
Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...
CVE-2012-5342
Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...
CVE-2012-5342
Summary: CVE-2012-5342 involves multiple SQL injection vulnerabilities in SenseSites CommonSense CMS. Affected components: the web application’s PHP scripts—specifically special.php, article.php, and cat2.php. Root cause (as described): unvalidated or improperly sanitized input through the id par...
SenseSites CommonSense CMS - article.php?id SQL Injection
SenseSites CommonSense CMS - article.php?id SQL Injection source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...
SenseSites CommonSense CMS - special.php?id SQL Injection
SenseSites CommonSense CMS - special.php?id SQL Injection source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...
SenseSites CommonSense CMS - 'special.php?id' SQL Injection
source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...
CVE-2010-5037
SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
Sql injection
SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
CVE-2010-5037
SenseSites CommonSense CMS is affected by a SQL injection flaw in article.php via the article_id parameter. The underlying issue is unsanitized input allowing arbitrary SQL execution. This vulnerability is documented with CVSSv2 base score 7.5 (HIGH) and network attack vector with low complexity ...
CVE-2006-3576
SQL injection vulnerability in search.php in SenseSites CommonSense CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the Date parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-3576
SQL injection vulnerability in search.php in SenseSites CommonSense CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the Date parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-3576
The CVE-2006-3576 entry describes a SQL injection in SenseSites CommonSense CMS 5.0, exploitable via the Date parameter in search.php. Affected component: search.php within CommonSense CMS 5.0. Root cause: improper handling of user-supplied input (Date parameter) leading to arbitrary SQL executio...