EUVD-2007-3546

Malware in sbrugna...

EUVD-2023-58655

Malicious code in bioql PyPI...

CVE-2023-6418

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via videos.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all th...

CVE-2023-6418: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via videos.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all th...

beta.veoh.com XSS vulnerability

Vulnerable URL: http://beta.veoh.com/m/videos.php?category=categoryeducationalandhowto==='"/alert"openbugbounty"...

store.avn.com XSS vulnerability

Vulnerable URL: http://store.avn.com/search-videos.php?q=// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check store.avn.com SSL...

PHP Melody CMS 2.3 SQL Injection

================================================================================ PHP Melody CMS v2.3 SQL injection ================================================================================ Vendor Homepage: https://www.phpsugar.com Date: 26/12/2015 Script Link:...

CVE-2012-6643

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

CVE-2012-6644

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to channels.php, 2 collections.php, 3 groups.php, or 4 videos.php; 5 query parameter to searchresult.php; or 6 type parameter to...

Sql injection

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

CVE-2012-6643: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

Clipbucket 2.6 - videos.php?time SQL Injection

Clipbucket 2.6 - videos.php?time SQL Injection source: https://www.securityfocus.com/bid/51321/info ClipBucket is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Web Design Noida SQL Injection

============================================== Web Design Noida SQL Injection Vulnerability ============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || Web Design Noida SQL Injection Vulnerability Vendor:...

PHPDirector 0.30 - videos.php SQL Injection

PHPDirector 0.30 - videos.php SQL Injection ====================================================================== PHPDirector 0.30 videos.php SQL Injection Vulnerability ====================================================================== Date : 29/06/2010 Author : Mr-AbdoX Emails :...

CVE-2010-2256: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/memberviewdetails.php and the 2 model parameter to videos.php...

CVE-2007-3562

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3562

CVE-2007-3562 affects PHP Director 0.21 and earlier, where the videos.php id parameter is vulnerable to SQL injection via a remote attacker. The NVD entry indicates a base score of 7.5 (HIGH) with network attack vector and partial impacts to confidentiality, integrity, and availability. Remediati...

CVE-2007-3562: Undefined Security Weakness

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3529

CVE-2007-3529 affects videos.php in PHPDirector 0.21 and earlier. The vulnerability allows remote attackers to obtain sensitive information by sending an empty value for the id[] parameter, which triggers an error message that reveals the path. Affected software is PHPDirector (videos.php) with v...