Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown

CVE-2009-4540

Disclosure Date: January 04, 2010 (last updated October 04, 2023)
SQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
0
Attacker Value
Unknown

CVE-2009-3500

Disclosure Date: September 30, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to main.php and (2) game_id parameter to game.php.
0
0
Attacker Value
Unknown

CVE-2009-3501

Disclosure Date: September 30, 2009 (last updated October 04, 2023)
SQL injection vulnerability in students.php in BPowerHouse BPStudents 1.0 allows remote attackers to execute arbitrary SQL commands via the test parameter in a preview action.
0
0
Attacker Value
Unknown

CVE-2009-3503

Disclosure Date: September 30, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) rid and (2) tid parameters.
0
0
Attacker Value
Unknown

CVE-2009-3499

Disclosure Date: September 30, 2009 (last updated October 04, 2023)
SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
0
0
Attacker Value
Unknown

CVE-2009-3502

Disclosure Date: September 30, 2009 (last updated October 04, 2023)
SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote attackers to execute arbitrary SQL commands via the music_id parameter.
0
0
Attacker Value
Unknown

CVE-2008-5593

Disclosure Date: December 16, 2008 (last updated October 04, 2023)
Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page and (2) admin parameters.
0
0
Attacker Value
Unknown

CVE-2008-5594

Disclosure Date: December 16, 2008 (last updated October 04, 2023)
Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page and (2) admin parameters.
0
0