Browse CVEs

HIGH 7.5 CVE-2010-4856 SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter. Xweblog No fix yet Fix from $1,9502011-10-05 HIGH 7.5 CVE-2010-4855 SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter. Xweblog No fix yet Fix from $1,9502011-10-05 HIGH 7.5 CVE-2010-4144 SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter. Kisisel Radyo Script No fix yet Fix from $1,9502010-11-02 MEDIUM 5.0 CVE-2010-4145 Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a da… Kisisel Radyo Script No fix yet Fix from $1,6002010-11-02 MEDIUM 5.0 CVE-2010-1736 KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database … Krm Haber No fix yet Fix from $1,6002010-05-06 MEDIUM 5.0 CVE-2009-4820 Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databa… Angelo Emlak No fix yet Fix from $1,6002010-04-27 MEDIUM 5.0 CVE-2010-1116 LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a da… Lookmer Muzik Portal No fix yet Fix from $1,6002010-03-25 MEDIUM 5.0 CVE-2010-1064 Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a da… Erolife Ajxgaleri Vt No fix yet Fix from $1,6002010-03-23 MEDIUM 5.0 CVE-2009-4585 UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to downlo… Uranyumsoft Listing Service No fix yet Fix from $1,6002010-01-06 HIGH 7.5 CVE-2008-6640 Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) uyeadmin.… Batmanportal No fix yet Fix from $1,9502009-04-07 MEDIUM 6.5 CVE-2008-6641 Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrary SQL commands via the sid pa… Shader Tv No fix yet Fix from $1,6002009-04-07 HIGH 7.5 CVE-2009-0447 Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the user… Mydesign Sayac No fix yet Fix from $1,9502009-02-10 HIGH 7.5 CVE-2008-5707 SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno param… Iltaweb Alisveris Sistemi No fix yet Fix from $1,9502008-12-24 HIGH 7.5 CVE-2008-5057 SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the film parameter… Dizi Portali No fix yet Fix from $1,9502008-11-13 HIGH 7.5 CVE-2008-4573 SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat paramet… Munzursoft Web Portal W3 No fix yet Fix from $1,9502008-10-15 HIGH 7.5 CVE-2008-4574 SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL commands via the linkid parameter. Ayco Okul Portali No fix yet Fix from $1,9502008-10-15 HIGH 7.5 CVE-2008-3888 SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter … Mini Nuke Freehost Mitigation only Fix from $1,9502008-09-02 HIGH 7.5 CVE-2008-3495 SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands via the kid parameter. Pcshey Portal No fix yet Fix from $1,9502008-08-06 HIGH 7.5 CVE-2008-2872 SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sayfa par… Shibby Shop after 2.2 Fix from $1,9502008-06-26 HIGH 7.5 CVE-2008-2882 upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have uns… Shibby Shop after 2.2 Fix from $1,9502008-06-26 MEDIUM 5.0 CVE-2008-2873 sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to downlo… Shibby Shop after 2.2 Fix from $1,6002008-06-26 HIGH 7.5 CVE-2008-2448 Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) adm… Meto Forum No fix yet Fix from $1,9502008-05-27 HIGH 7.5 CVE-2008-2334 Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) forumid parameter… Philboard No fix yet Fix from $1,9502008-05-19 HIGH 7.5 CVE-2008-2047 Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) hpz/p… Angelo Emlak No fix yet Fix from $1,9502008-05-01 HIGH 7.5 CVE-2008-1939 Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) topic … Philboard No fix yet Fix from $1,9502008-04-25 HIGH 7.5 CVE-2007-3884 SQL injection vulnerability in philboard_forum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the forumid par… Husrevforum Mitigation only Fix from $1,9502007-07-18 HIGH 7.5 CVE-2006-7161 SQL injection vulnerability in giris_yap.asp in Hazir Site 2.0 allows remote attackers to bypass authentication via the (1) k_a class or (2) sifre pa… Hazirsite Mitigation only Fix from $1,9502007-03-07 HIGH 7.5 CVE-2006-6337 Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to execute arbitrary SQL commands… Aspee Ziyaretci Defteri No fix yet Fix from $1,9502006-12-07 HIGH 7.5 CVE-2006-5023 SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the kategori par… Xweblog after 2.1 Fix from $1,9502006-09-27