421 matches found
CVE-2006-7145: Undefined Security Weakness
edituser.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified userid parameter...
CVE-2007-1297
SQL injection vulnerability in viewprofile.php in AJDating 1.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2006-7004: Undefined Security Weakness
Cross-site scripting XSS vulnerability in emailrequest.php in PSY Auction allows remote attackers to inject arbitrary web script or HTML via the userid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-6016: Out-of-bounds Read
wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified userid parameter...
CVE-2006-5828
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2006-5828: Undefined Security Weakness
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2006-1847: Undefined Security Weakness
SQL injection vulnerability in the YourAccount module in PHP-Nuke 7.8 might allows remote attackers to execute arbitrary SQL commands via the userid parameter in the YourHome functionality. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2005-4337: Undefined Security Weakness
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified userid parameter and a "/" in the encodedpw parameter...
CVE-2005-3917
SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2005-3917: Undefined Security Weakness
SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CommodityRentals 2.0 - SQL Injection
CommodityRentals 2.0 - SQL Injection source: https://www.securityfocus.com/bid/15552/info CommodityRentals is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...
Commodity Rentals 2.x "user_id" Sql inj.
Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html Vendor:http://www.commodityrentals.com/ affected version: 2.x and prior Product Description: CommodityRentals is the most comprehensive Online Rental Business...
CommodityRentals 2.0 - SQL Injection
source: https://www.securityfocus.com/bid/15552/info CommodityRentals is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying...
PHP-Nuke 7.8 - 'modules.php' SQL Injection
/ PHP-Nuke 4.0 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru / // tested on 7.8 include include include include include include include define START 47 define END 103 define SZ 1024 define PORT 80 define PREFIX "nuke" define SQL...
CVE-2005-2312
management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the userid parameter...
CVE-2005-2312
Realnode Emilda 1.2.2 and earlier are affected by a vulnerability in management.php that allows remote attackers to perform actions as other users by modifying the user_id parameter. This represents a user-privilege escalation through parameter tampering, enabling potential unauthorized access to...
CVE-2005-2312
management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the userid parameter...
CVE-2005-2312: Undefined Security Weakness
management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the userid parameter...
CVE-2002-1659
CVE-2002-1659 affects PortalApp 2.2 where user_profile.asp allows local users to gain privileges by modifying the user_id variable. The root cause is manipulating a user_id parameter in the profile page, enabling local privilege escalation with complete impact on confidentiality, integrity, and a...