257991
|
- |
|
tagworx
|
tagworx_cms
|
Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to contact.php and the (2) nid parameter to news.php.
|
CWE-89
SQL Injection
|
CVE-2008-2394
|
2017-09-29 10:31 |
2008-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257992
|
- |
|
alkalinephp
|
alkalinephp
|
SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2008-2395
|
2017-09-29 10:31 |
2008-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257993
|
- |
|
wajox_software
|
mircrossys_cms
|
PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL…
|
CWE-94
Code Injection
|
CVE-2008-2396
|
2017-09-29 10:31 |
2008-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257994
|
- |
|
fichive
|
fichive
|
SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter in a Fiction action, possibly related to sources/fiction.c…
|
CWE-89
SQL Injection
|
CVE-2008-2416
|
2017-09-29 10:31 |
2008-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257995
|
- |
|
how2asp
|
webboard
|
SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary SQL commands via the qNo parameter.
|
CWE-89
SQL Injection
|
CVE-2008-2417
|
2017-09-29 10:31 |
2008-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257996
|
- |
|
sun
|
solaris
|
Race condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors.
|
CWE-362
Race Condition
|
CVE-2008-2418
|
2017-09-29 10:31 |
2008-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257997
|
- |
|
therealestatescript
|
the_real_estate_script
|
SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter.
|
CWE-89
SQL Injection
|
CVE-2008-2443
|
2017-09-29 10:31 |
2008-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257998
|
- |
|
calogic
|
calogic_calendars
|
SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter.
|
CWE-89
SQL Injection
|
CVE-2008-2444
|
2017-09-29 10:31 |
2008-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257999
|
- |
|
wgcc
|
web_group_communication_center
|
Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the …
|
CWE-79
Cross-site Scripting
|
CVE-2008-2445
|
2017-09-29 10:31 |
2008-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258000
|
- |
|
wgcc
|
web_group_communication_center
|
Multiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) userid pa…
|
CWE-89
SQL Injection
|
CVE-2008-2446
|
2017-09-29 10:31 |
2008-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|