22 matches found
EUVD-2008-5563
Malware in sbrugna...
EUVD-2008-6847
Malware in sbrugna...
EUVD-2010-1398
Malware in sbrugna...
EUVD-2009-0256
Malware in sbrugna...
SQL Injection Vulnerability in PHPMyWind sysevent.php File
PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . A SQL injection vulnerability exists in the PHPMyWind sysevent.php file. The vulnerability is due to the system siteid parameter does not filter the data submitted by the user, a remote attacker can exploit the...
PHPCMS siteid parameter has SQL injection vulnerability
PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. PHPCMS is vulnerable to SQL injection. As the program failed to securely filter the encryption operation of siteid parameters...
科创CMS search_process_hn.jsp 参数siteId SQL注入漏洞
No description provided by source...
ASP Dynamika 2.5 Cross Site Scripting
Exploit Title : ASP Dynamika 2.5 Cross Site Scripting Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.dynamika.co.il/ Google Dork : "Powered By : Dynamika" Date : 2015/12/08 Version : 2.5 Vulnerable Paramter siteid= Bypass '"--alert0xa Demo:...
Sql injection
SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter...
CVE-2010-1370
SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter...
CVE-2010-1370
SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter...
CVE-2010-1370
CVE-2010-1370 describes an SQL injection vulnerability in detailad.asp within Pre Classified Listings ASP, allowing remote attackers to execute arbitrary SQL commands via the siteid parameter. The NVD entry lists a base score of 7.5 (High) with network attack vector, low attack complexity, and no...
CVE-2008-6887
SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the siteid parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the 1 courseid parameter to enrolments/step1.php, or the 2 search or 3 siteid parameter to files/sharedlist.php...
CVE-2009-2149
Multiple cross-site scripting XSS vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the 1 courseid parameter to enrolments/step1.php, or the 2 search or 3 siteid parameter to files/sharedlist.php...
CVE-2009-0248
Cross-site scripting XSS vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter...
CVE-2009-0248
Cross-site scripting XSS vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter...
CVE-2009-0248
Cross-site scripting XSS vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter...
CVE-2008-5588
SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID parameter...