Sql injection

SQL injection vulnerability in SearchResults.php in Scripts For Sites SFS EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter...

CVE-2008-6245

SQL injection vulnerability in track.php in Scripts For Sites SFS EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6242

SQL injection vulnerability in SearchResults.php in Scripts For Sites SFS EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter...

Sql injection

SQL injection vulnerability in track.php in Scripts For Sites SFS EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in topsite.php in Scripts For Sites SFS EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter...

Sql injection

SQL injection vulnerability in showcategory.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-6245

SQL injection vulnerability in track.php in Scripts For Sites SFS EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6243

The CVE-2008-6243 entry describes an SQL injection vulnerability in showcategory.php of a Scripts For Sites (SFS) Hotscripts-like site. The vulnerability arises from unsanitized input in the cid parameter, allowing remote attackers to execute arbitrary SQL commands. The associated references corr...

CVE-2008-6247

CVE-2008-6247 affects Scripts For Sites (SFS) EZ Top Sites, with a SQL injection in topsite.php exploitable via the ts parameter. The vulnerability occurs in user input handling that allows arbitrary SQL commands to be executed by an attacker remotely. Connected sources confirm the affected compo...

CVE-2008-6244

CVE-2008-6244 describes a SQL injection in the Scripts for Sites (SFS) EZ Gaming Cheats, specifically in the file/view function view_reviews.php. The vulnerability occurs via the id parameter and allows remote attackers to execute arbitrary SQL commands, enabling data access or manipulation. The ...

CVE-2008-6243

SQL injection vulnerability in showcategory.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-6237

SQL injection vulnerability in software-description.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6237

CVE-2008-6237 is an SQL injection in Scripts For Sites EZ Hotscripts/ SFS-like site via software-description.php (parameter id). Root cause: insufficient input sanitization before SQL usage. Impact per provided sources: remote attacker can execute arbitrary SQL commands; data compromise or modifi...

Sql injection

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970...

CVE-2009-0532

Cross-site scripting XSS vulnerability in password.php in Scripts For Sites SFS EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-0533

Cross-site scripting XSS vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-0533

CVE-2009-0533 describes a Cross-site scripting (XSS) vulnerability in password.php of Scripts for Sites EZ Reminder, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors (possibly involving the u2 parameter). NVD/SEC data assign a CVSS v2 base score of 4.3 (Medium) wi...

CVE-2009-0532

Cross-site scripting XSS vulnerability in password.php in Scripts For Sites SFS EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

SA-CONTRIB-2009-006 - Troll - Cross site request forgeries

The Troll module provides management tools for community sites to deal with badly behaved users, known as "trolls", including banning users by IP address, advanced user searching, and blocking users by role. The module does not properly implement the Drupal Form API which makes it vulnerable to...

psoam-ddxss.txt

--------------------------------------------------------- Portal Name: Power System Of Article Management Version : 3.0 Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...