11858 matches found
Sql injection
SQL injection vulnerability in the CamelcityDB comcamelcitydb2 component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
Sql injection
Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to 1 contentAE.asp or 2 templatesAE.asp...
Sql injection
SQL injection vulnerability in the Joostina comezautos component for Joomla! allows remote attackers to execute arbitrary SQL commands via the firstCode parameter in a helpers action to index.php...
Sql injection
SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...
Sql injection
SQL injection vulnerability in the Event event extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...
Sql injection
SQL injection vulnerability in the FE user statistic festat extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in the TimeTrack comtimetrack component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ctid parameter in a timetrack action to index.php...
CVE-2010-4936
SQL injection vulnerability in the Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
CVE-2010-4933
CVE-2010-4933: A SQL injection in Geeklog 1.3.8 affects filemgmt/singlefile.php via the lid parameter, allowing remote SQL execution. Affected software/version: Geeklog 1.3.8 (Geeklog core, filemgmt module). Root cause: improper handling of lid leading to arbitrary SQL execution. Impact per sourc...
CVE-2010-4954
SQL injection vulnerability in productreviewsinfo.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the productsid parameter...
CVE-2010-4940
SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4935
SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter...
CVE-2010-4963
SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...
CVE-2010-4922
Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to 1 contentAE.asp or 2 templatesAE.asp...
CVE-2010-4946
CVE-2010-4946 describes an SQL injection in ALLPC 2.5, specifically in product_info.php where the products_id parameter can be manipulated to run arbitrary SQL. The vulnerability, as documented by NVD and Red Hat, carries a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexi...