Sql injection

SQL injection vulnerability in SearchResults.php in Scripts For Sites SFS EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter...

CVE-2008-6242

SQL injection vulnerability in SearchResults.php in Scripts For Sites SFS EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter...

CVE-2008-6245

SQL injection vulnerability in track.php in Scripts For Sites SFS EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6243

The CVE-2008-6243 entry describes an SQL injection vulnerability in showcategory.php of a Scripts For Sites (SFS) Hotscripts-like site. The vulnerability arises from unsanitized input in the cid parameter, allowing remote attackers to execute arbitrary SQL commands. The associated references corr...

CVE-2008-6247

CVE-2008-6247 affects Scripts For Sites (SFS) EZ Top Sites, with a SQL injection in topsite.php exploitable via the ts parameter. The vulnerability occurs in user input handling that allows arbitrary SQL commands to be executed by an attacker remotely. Connected sources confirm the affected compo...

CVE-2008-6243

SQL injection vulnerability in showcategory.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-6245

SQL injection vulnerability in track.php in Scripts For Sites SFS EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6244

CVE-2008-6244 describes a SQL injection in the Scripts for Sites (SFS) EZ Gaming Cheats, specifically in the file/view function view_reviews.php. The vulnerability occurs via the id parameter and allows remote attackers to execute arbitrary SQL commands, enabling data access or manipulation. The ...

CVE-2008-6237

SQL injection vulnerability in software-description.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6237

CVE-2008-6237 is an SQL injection in Scripts For Sites EZ Hotscripts/ SFS-like site via software-description.php (parameter id). Root cause: insufficient input sanitization before SQL usage. Impact per provided sources: remote attacker can execute arbitrary SQL commands; data compromise or modifi...

CVE-2008-6243: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showcategory.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-6244: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewreviews.php in Scripts for Sites SFS EZ Gaming Cheats allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6246: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in category.php in Scripts For Sites SFS EZ Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6237: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in software-description.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6245: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in track.php in Scripts For Sites SFS EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6247: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in topsite.php in Scripts For Sites SFS EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter...

CVE-2008-6242: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SearchResults.php in Scripts For Sites SFS EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter...

Sql injection

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970...

CVE-2009-0533

Cross-site scripting XSS vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-0532

Cross-site scripting XSS vulnerability in password.php in Scripts For Sites SFS EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...