5638 matches found
Sql injection
SQL injection vulnerability in viewcresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coderid parameter...
Sql injection
SQL injection vulnerability in viewmags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4463
CVE-2008-4463: SQL injection in view_news.php of Vastal I-Tech Jobs Zone, exploitable via the news_id parameter. Remote attackers could alter queries and potentially access/modify data. Affected: view_news.php; root cause: unsanitized input leading to SQL injection. CVSS v2 score 7.5 (HIGH) with ...
CVE-2008-4468
The CVE-2008-4468 vulnerability is a SQL injection in view_news.php of Vastal I-Tech Share Zone. The id parameter allows remote attackers to execute arbitrary SQL commands, with potential partial impact on confidentiality, integrity, and availability (CVSS2 base score 7.5, NETWORK, LOW complexity...
CVE-2008-4469
CVE-2008-4469 describes an SQL injection in the view_cresume.php endpoint of the Vastal I-Tech Freelance Zone, exploitable via the coder_id parameter. The underlying issue is unsafely constructed SQL queries that allow remote attackers to alter or retrieve data. Affected product details are not e...
CVE-2008-4464
Vulnerability: CVE-2008-4464 affects Vastal I‑Tech Mag Zone (view_mags.php) where the cat_id parameter is vulnerable to SQL injection, enabling remote attackers to execute arbitrary SQL commands. Underlying issue: improper input handling in the view_mags.php component. Impact: partial confidentia...
CVE-2008-4460
CVE-2008-4460 concerns a SQL injection vulnerability in Vastal I-Tech MMORPG Zone, specifically in game.php where the game_id parameter can be used by an attacker to execute arbitrary SQL commands remotely. The vulnerability description identifies the affected component as game.php within the MMO...
CVE-2008-4468: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4463: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in viewnews.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2008-4462: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in viewnews.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2008-4460
SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the gameid parameter...
CVE-2008-4462
SQL injection vulnerability in viewnews.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2008-4463
SQL injection vulnerability in viewnews.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2008-4465
SQL injection vulnerability in viewmags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-4466
SQL injection vulnerability in viewproductscat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-4469
SQL injection vulnerability in viewcresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coderid parameter...
CVE-2008-4466
Vulnerability : CVE-2008-4466 affects the view_products_cat.php component of Vastal I-Tech Cosmetics Zone. The cat_id parameter is vulnerable to SQL injection, enabling remote attackers to execute arbitrary SQL commands. This can impact confidentiality, integrity, and availability as indicated by...
CVE-2008-4461: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in advancedsearchresults.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter...