116 matches found
xueBook 1.0 Version SQL Injection
xueBook 1.0 Version SQL Injection Credit : SpC-X Site : http://wWw.SaVSaK.CoM Greetz : | The-BeKiR | Liz0ziM | Poizonb0x | Erne | Code : http://www.target.com/path/index.php?start=SQL Example : http://www.secret-obsession.com/book/index.php?start=SQL /SpC-x -- Get your free email from...
CVE-2006-1807: Undefined Security Weakness
Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...
PT-2005-4858 · Simple Machines · Simple Machines Forum
Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions 1.1 rc1 and earlier Description: A SQL injection issue in Memberlist.php allows remote attackers to potentially execute arbitrary SQL commands via the start parameter. However, the vendor and third parties...
CVE-2005-4159: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum SMF 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that since only one character...
CVE-2005-3940
SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter...
CVE-2005-3940: Undefined Security Weakness
SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter...
CVE-2005-3884: Undefined Security Weakness
Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 term and 2 start parameters to index.php...
CVE-2005-3746: Undefined Security Weakness
SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the start parameter...
PT-2005-4313 · Chipmunk Scripts · Chipmunk Scripts Guestbook
Name of the Vulnerable Software and Affected Versions: Chipmunk Scripts Guestbook affected versions not specified Description: The issue allows remote attackers to obtain the installation path of the script by causing an error message to be displayed. This can be achieved through a URL that...
CVE-2005-1778
Cross-site scripting XSS vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter...
CVE-2005-1777: Undefined Security Weakness
SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parameter...
CVE-2005-1778: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter...
CVE-2005-1116: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the Calendar module for phpBB allow remote attackers to inject arbitrary web script or HTML via the start parameter to calendarscheduler.php...
CVE-2005-0872: Undefined Security Weakness
Cross-site scripting XSS vulnerability in calendarscheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter...
CVE-2005-0781: Undefined Security Weakness
SQL injection vulnerability in 1 viewall.php and 2 category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php...
CVE-2005-0782: Undefined Security Weakness
Cross-site scripting XSS vulnerability in 1 viewall.php and 2 category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php...