SQL Injection in Elxis CMS

Vulnerability ID: HTB22700 Reference: http://www.htbridge.ch/advisory/sqlinjectioninelxiscms1.html Product: Elxis CMS Vendor: Elxis Team http://www.elxis.org/ Vulnerable Version: 2009.2 electra Vendor Notification: 16 November 2010 Vulnerability Type: SQL Injection Status: Fixed by Vendor Risk...

Sql injection

SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL commands via a usercookie cookie...

CVE-2007-3521

SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL commands via a usercookie cookie...

Mambo Open Source usercookie Parameter SQL Injection

The remote installation of Mambo Open Source fails to sanitize input to the 'usercookie' cookie array before using it in a database query to authenticate a user. Provided PHP's 'magicquotesgpc' setting is disabled, an attacker may be able to exploit this issue to manipulate database queries and,...