CVE-2009-4577: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the MDForum module 2.x through 2.07 for MAXdev MDPro allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php...

CVE-2008-6952: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2009-1411: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php...

CVE-2008-4886: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2008-4741: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in FAR-PHP 1.00, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the c parameter...

CVE-2008-4177: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2008-0909: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0908: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary SQL commands via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0154: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in EvilBoard 0.1a Alpha allows remote attackers to execute arbitrary SQL commands the c parameter...

CVE-2008-0155: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in EvilBoard 0.1a Alpha allows remote attackers to inject arbitrary web script or HTML via the c parameter...

CVE-2007-5013: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the 1 u, 2 p, 3 c, and 4 s parameters, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained sole...

CVE-2007-3707: Undefined Security Weakness

Directory traversal vulnerability in index.php in CodeIgniter 1.5.3 before 20070628, when enablequerystrings is true, allows remote attackers to read arbitrary files via a .. dot dot in the c parameter...

CVE-2007-3052: Undefined Security Weakness

SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2007-2549: Undefined Security Weakness

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 c or 2 quantity parameter...

CVE-2007-2571: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action...

CVE-2007-1962

SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action...

CVE-2007-1962: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action...

CVE-2007-1956: Undefined Security Weakness

SQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the C parameter...

CVE-2007-1555: Undefined Security Weakness

SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2006-4504: Undefined Security Weakness

SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 c and 2 l parameters...