407 matches found
CVE-2012-1777
SQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 allows remote attackers to execute arbitrary SQL commands via the state parameter...
CVE-2012-1777: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 allows remote attackers to execute arbitrary SQL commands via the state parameter...
PT-2012-3528
Name of the Vulnerable Software and Affected Versions F5 FirePass versions 6.0.0 through 6.1.0 F5 FirePass versions 7.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the state parameter in the my.activation.php3 file. Recommendations For F...
Sql injection
SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action...
CVE-2010-2312: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action...
CVE-2006-6205
Multiple cross-site scripting XSS vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the 1 city or 2 State parameter...
PT-2006-6835 · Enthrallweb · Enthrallweb Ehomes
Name of the Vulnerable Software and Affected Versions: Enthrallweb eHomes affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the city or State...