CVE-2011-5140: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to a tags.php, b list.php, c index.php, d mainindex.php, e viewpost.php, f archive.php, g control/approvecomments.php, h...

CVE-2011-5072

Multiple SQL injection vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to portal/kb.php; 2 contractid parameter to contractaddservice.php; 3 id parameter to editescalationpath.php; 4 unlock, 5 lock...

kernel: agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls

The agpgenericremovememory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service system crash via a crafted AGPIOCUNBIND agpioctl ioctl call, a different...

CVE-2009-5093

Directory traversal vulnerability in gastbuch.php in Gästebuch Gastebuch 1.6 allows remote attackers to read arbitrary files via a .. dot dot in the start parameter...

PT-2011-2894

Name of the Vulnerable Software and Affected Versions Simple Machines Forum SMF versions prior to 1.1.13 Simple Machines Forum SMF versions 2.x prior to 2.0 RC5 Description The issue is related to improper validation of the start parameter, which could allow remote attackers to conduct SQL...

PT-2010-4094 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.8.7g Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is due to an incorrect fix for a previous issue. The graph start parameter to the...

CVE-2008-7072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary web script or HTML via the start parameter...

CVE-2008-6368: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start parameter...

ruby: integer overflows in rb_ary_fill() / Array#fill

Integer overflow in the rbaryfill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service crash or possibly have unspecified other impact via a call to the Arrayfill method with a start aka beg argument greater than ARYMAXSIZE. NOTE: this...

CVE-2007-4653: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter in a search action...

CVE-2006-7042: Undefined Security Weakness

Cross-site scripting XSS vulnerability in directory/index.php in Chipmunk directory allows remote attackers to inject arbitrary web script or HTML via the start parameter...

Sql injection

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via 1 the cat parameter to albmgr.php, and possibly 2 the gid parameter to usermgr.php; 3 the start parameter to dbecard.php; and the...

CVE-2006-6840

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."...

CVE-2006-6840: Undefined Security Weakness

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."...

CVE-2006-6840

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."...

CVE-2006-4367: Undefined Security Weakness

SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter...

CVE-2006-3163: Undefined Security Weakness

Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start or 2 sort parameters...

Sql injection

SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter...

CVE-2006-2855

CVE-2006-2855 describes an SQL injection in xueBook 1.0 where index.php is vulnerable via the start parameter. The root cause is insufficient input validation allowing arbitrary SQL execution by remote attackers. The vulnerability impact is remote compromise of the database (partial confidentiali...

CVE-2006-2855: Undefined Security Weakness

SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter...