117 matches found
CVE-2007-1899
Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via 1 the userid parameter in a viewuser action to index.php, and allow remote authenticated administrators to execute arbitrary SQL commands via 2 the postid parameter in ...
Sql injection
SQL injection vulnerability in oneday.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...
Sql injection
SQL injection vulnerability in index.php in the PccookBook compccookbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2008-0844
SQL injection vulnerability in index.php in the PccookBook compccookbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2008-0761
SQL injection vulnerability in index.php in the Prince Clan Chess Club compcchess 0.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a players action...
Sql injection
SQL injection vulnerability in index.php in the Prince Clan Chess Club compcchess 0.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a players action...
CVE-2004-2738
Cross-site scripting XSS vulnerability in checkuserid.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary web script or HTML via the userid parameter...
CVE-2006-7145
edituser.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified userid parameter...
CVE-2006-7145
edituser.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified userid parameter...
Sql injection
SQL injection vulnerability in viewprofile.php in AJDating 1.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2007-1297
SQL injection vulnerability in viewprofile.php in AJDating 1.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2006-5828
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2005-3917
SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the userid parameter...
Commodity Rentals 2.x "user_id" Sql inj.
Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html Vendor:http://www.commodityrentals.com/ affected version: 2.x and prior Product Description: CommodityRentals is the most comprehensive Online Rental Business...
CVE-2005-2312
management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the userid parameter...
CVE-2005-2312
Realnode Emilda 1.2.2 and earlier are affected by a vulnerability in management.php that allows remote attackers to perform actions as other users by modifying the user_id parameter. This represents a user-privilege escalation through parameter tampering, enabling potential unauthorized access to...