950 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the 1 userId parameter to tvserver/server/user/setPermissions.jsp, 2 deptName parameter to...
CVE-2009-4848: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the 1 userId parameter to tvserver/server/user/setPermissions.jsp, 2 deptName parameter to...
CVE-2010-1338
SQL injection vulnerability in tsother.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action...
CVE-2010-1339: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in tsother.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a modboard action, which is not properly handled in a forced SQL error message...
CVE-2010-1338: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in tsother.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action...
Easy-Clanpage <= v2.1 SQL Injection Exploit
Exploit for multiple platform in category web applications =========================================== Easy-Clanpage 2.1 http://www.easy-clanpage.de /?section=downloads&action=viewdl&id=16 +Price : for free +Language : PHP +Discovered by Easy Laster...
Easy-Clanpage 2.1 - SQL Injection
Easy-Clanpage 2.1 - SQL Injection /----------------------------Information------------------------------------------------ +Name : Easy-Clanpage 2.1 http://www.easy-clanpage.de /?section=downloads&action=viewdl&id=16 +Price : for free +Language : PHP +Discovered by Easy Laster +Security Group...
Flirt Matching Sms System - SQL Injection
----------------------------Information------------------------------------------------ +Name : Flirt Matching SMS System = SQL Injection Exploit +Autor : Easy Laster +Date : 26.03.2010 +Script : Flirt Matching SMS System +Download : ------------------ +Demo : http://phpspezial.de/singel/ +Price ...
CVE-2010-1046: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 userid username and 2 password parameters...
PHPKit 1.6.1 - 'mailer.php' SQL Injection
Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Phpkit 1.6.1 SQL Injection member.php Vulnerabilities SQL Injection Language: PHP Download: this script is for free Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS...
CVE-2009-4176: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long 1 userid or 2 passwd parameter to ovlogin.exe...
CVE-2009-3846: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long 1 userid or 2 passwd parameter...
Sql injection
SQL injection vulnerability in the getemployee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter aka userid variable to dispatch.php...
CVE-2009-2734
SQL injection vulnerability in the getemployee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter aka userid variable to dispatch.php...
CVE-2009-2734: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the getemployee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter aka userid variable to dispatch.php...
CVE-2009-3417: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the IDoBlog comidoblog component 1.1 build 30 for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action to index.php, a different vector than CVE-2008-2627...
Small black are the commonly used background universal login password or-the vulnerability warning-the black bar safety net
After landing in the background, receiving a user input of Userid and Password data, respectively, and assigned to the user and pwd, and then use the sql="select from admin where username="&user&" and password="&pwd&"" This sentence to the user name and password to be verified. To common sense to...
CVE-2009-2604: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...
CVE-2009-2428: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to suchauftraegeuser.php and the 2 descr parameter to vote.php; and other unspecified vectors...
