Show filters
115 Total Results
Displaying 91-100 of 115
Sort by:
Attacker Value
Unknown
CVE-2008-3749
Disclosure Date: August 21, 2008 (last updated October 04, 2023)
SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2008-3127
Disclosure Date: July 10, 2008 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in hioxBannerRotate.php in HIOX Banner Rotator (HBR) 1.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.
0
Attacker Value
Unknown
CVE-2008-2760
Disclosure Date: June 18, 2008 (last updated October 04, 2023)
SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter.
0
Attacker Value
Unknown
CVE-2008-2761
Disclosure Date: June 18, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Banner Manager XE 2.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the text parameter in (1) searchbanners.asp and (2) listadvertisers.asp, and other unspecified fields. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2008-0200
Disclosure Date: January 10, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) drop parameter.
0
Attacker Value
Unknown
CVE-2007-6512
Disclosure Date: December 21, 2007 (last updated October 04, 2023)
PHP MySQL Banner Exchange 2.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database information via a direct request to inc/lib.inc.
0
Attacker Value
Unknown
CVE-2007-6291
Disclosure Date: December 10, 2007 (last updated October 04, 2023)
SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter.
0
Attacker Value
Unknown
CVE-2007-6091
Disclosure Date: November 22, 2007 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.
0
Attacker Value
Unknown
CVE-2007-5997
Disclosure Date: November 15, 2007 (last updated October 04, 2023)
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2007-0178
Disclosure Date: January 11, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the s[phppath] parameter.
0
