10 matches found
SoftBiz Web Hosting Directory Script 1.1 browsecats.php cid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15561/info Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input before using it in an SQL query...
CVE-2008-2087
SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...
CVE-2008-2087
The CVE-2008-2087 vulnerability affects Softbiz Web Host Directory Script, specifically in search_result.php. When magic_quotes_gpc is disabled, the host_id parameter can be exploited to inject SQL commands, enabling remote execution of arbitrary SQL. The description does not provide details on a...
CVE-2008-2087
SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...
CVE-2008-2087: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...
CVE-2005-3817
Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter in searchresult.php, 2 sbresid parameter in review.php, 3 cid parameter in browsecats.php, 4 hid parameter in email.php, and...
CVE-2005-3817
CVE-2005-3817 refers to multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier. The flaws allow remote SQL commands via (1) cid in search_result.php, (2) sbres_id in review.php, (3) cid in browsecats.php, (4) h_id in email.php, and (5) an unspecified parameter...
CVE-2005-3817
Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter in searchresult.php, 2 sbresid parameter in review.php, 3 cid parameter in browsecats.php, 4 hid parameter in email.php, and...
CVE-2005-3817: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter in searchresult.php, 2 sbresid parameter in review.php, 3 cid parameter in browsecats.php, 4 hid parameter in email.php, and...
Softbiz Web Host Directory Script Multiple vuln.
Softbiz Web Host Directory Script Multiple vuln. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/web-host-directory-script-multiple.html Vendor:www.softbizscripts.com Product link:http://www.softbizscripts.com/web-hosting-directory-script.php...