Sql injection

SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to execute arbitrary SQL commands via the UserName parameter...

Sql injection

SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary SQL commands via the query string...

CVE-2009-2734

SQL injection vulnerability in the getemployee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter aka userid variable to dispatch.php...

CVE-2009-3697

SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters...

CVE-2009-3715

Multiple SQL injection vulnerabilities in scrlogin.php in MCshoutbox 1.1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-2734

SQL injection vulnerability in the getemployee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter aka userid variable to dispatch.php...

CVE-2009-3718

CVE-2009-3718 describes a SQL injection in Battle Blog (versions 1.25 and 1.30 build 2). The vulnerability is triggered via the UserName parameter in admin/authenticate.asp, allowing remote attackers to execute arbitrary SQL commands. This aligns with the NVD entry (base score 7.5, HIGH) and indi...

CVE-2009-3712

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php; and the itemid parameter to 2 viewfullsize.php, 3 classifidead.php, and 4 crosspromoteitems.php...

Sql injection

SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands via the Username...

Sql injection

SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2009-3667

SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands via the Username...

CVE-2009-3667

SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands via the Username...

CVE-2009-3659

SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in the JoomlaCache CB Resume Builder comcbresumebuilder component for Joomla! allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a groupmembers action to index.php...

CVE-2009-3645

SQL injection vulnerability in the JoomlaCache CB Resume Builder comcbresumebuilder component for Joomla! allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a groupmembers action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-3642

Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-3642

Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-3645

SQL injection vulnerability in the JoomlaCache CB Resume Builder comcbresumebuilder component for Joomla! allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a groupmembers action to index.php...

CVE-2009-3595

SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the CatID parameter, a different vector than CVE-2009-3590...