الباحثون
رجوع
Easy Laster
#962
من 60,594
247.5
إجمالي CVSS
الثغرات
·
33
عالية
33
PT-2012-5933
2012-10-08
7.5
CVE-2012-5334
Unknown
Pre Printing Press
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `pid` parameter in the product desc.php file.
PT-2012-5890
2012-10-04
7.5
CVE-2012-5291
Posse
Posse Softball Director Cms
The issue allows remote attackers to execute arbitrary SQL commands via the `idteam` parameter in the team.php file. This can lead to unauthorized access and manipulation of database content.
PT-2012-5718
2012-09-19
7.5
CVE-2012-5000
Witze
Witze
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `id` parameter in a "show" action within the jokes/index.php file.
PT-2012-2940
2012-01-20
7.5
CVE-2012-0906
Dev!L`Z Clan
Dev!L`Z Clanportal
A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the `id` parameter in a `showkat` action to the "index.php" endpoint.
PT-2012-2939
2012-01-20
7.5
CVE-2012-0905
Dev!Lz Clanportal
Dev!L'Z Clanportal (Dzcp) Gamebase Addon
A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the `gameid` parameter in a detail action to the "index.php" endpoint.
PT-2011-1997
2011-11-23
7.5
CVE-2010-5062
Mh Products
Mh Products Kleinanzeigenmarkt
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `c` parameter in the "search.php" file.
PT-2011-1939
2011-11-02
7.5
CVE-2010-5004
2Daybiz
2Daybiz Polls
The issue allows remote attackers to execute arbitrary SQL commands via the `category` parameter in the searchvote.php file. This can lead to unauthorized access and manipulation of database content.
PT-2011-1909
2011-11-01
7.5
CVE-2010-4974
Scriptsfeed
Scriptsfeed Auto Dealer
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the "info.php" file.
PT-2011-1904
2011-11-01
7.5
CVE-2010-4969
Brotherscripts
Brotherscripts Business Directory
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the "articlesdetails.php" file.
PT-2011-1797
2011-10-05
7.5
CVE-2010-4862
Joomla
Jextensions Je Directory
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `catid` parameter in an item action to the "index.php" endpoint.
PT-2011-1779
2011-09-27
7.5
CVE-2010-4844
Mh Products
Mh Products Easy Online Shop
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `kat` parameter in the content.php file.
PT-2011-1782
2011-09-27
7.5
CVE-2010-4847
Mhp
Mhp Downloadshop
The issue allows remote attackers to execute arbitrary SQL commands via the `ItemID` parameter in the view item.php file. This can lead to unauthorized access and manipulation of database content.
PT-2011-1739
2011-04-27
7.5
CVE-2010-4791
Mg
Mg User-Fotoalbum
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `album id` parameter in the infusions/mg user fotoalbum panel/mg user fotoalbum.php file.
PT-2011-3278
2011-04-10
7.5
CVE-2011-1667
Unknown
Anzeigenmarkt 2011
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `q` parameter in a "list" action, specifically targeting the index.php file.
PT-2011-1671
2011-02-01
7.5
CVE-2010-4721
Immo Makler
Immo Makler
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the "news.php" file.
PT-2010-3743
2010-06-02
7.5
CVE-2010-2133
My Little Forum
My Little Forum
The issue allows remote attackers to execute arbitrary SQL commands via the `id` parameter in the "contact.php" file. This is a different attack vector.
PT-2010-3547
2010-05-12
7.5
CVE-2010-1924
Hi Web
Hi Web Wiesbaden Live Shopping Multi Portal System
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `artikel` parameter in the "index.php" endpoint.
PT-2010-3481
2010-05-07
7.5
CVE-2010-1855
Unknown
Pay Per Watch & Bid Auktions System
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id auk` parameter in the "auktion.php" file.
PT-2010-3062
2010-04-13
7.5
CVE-2010-1365
Unknown
Uiga Fan Club
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `id` parameter in a "photos" action within the index.php file.
PT-2010-3061
2010-04-13
7.5
CVE-2010-1364
Uiga
Uiga Personal Portal
The issue allows remote attackers to execute arbitrary SQL commands via the `id` parameter in a "photos" action. This can be exploited by sending a malicious request to the `/index.php` endpoint.