11858 matches found
CVE-2008-7077
Multiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...
Sql injection
Multiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...
Sql injection
Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via 1 the subcatid parameter to article.list.php; or the artid parameter to 2 article.print.php, 3 article.comments.php, 4 article.publisher.php, or 5...
CVE-2008-7075
Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via 1 the subcatid parameter to article.list.php; or the artid parameter to 2 article.print.php, 3 article.comments.php, 4 article.publisher.php, or 5...
CVE-2008-7083
CVE-2008-7083 involves several SQL injection flaws in the ReVou Micro Blogging Twitter clone that allow remote attackers to execute arbitrary SQL commands through the username and password input fields. The entry’s CVSS v2 base score is 7.5 ( HIGH ), with network access, low attack complexity, an...
CVE-2008-7075
CVE-2008-7075 affects Kalptaru Infotech Ltd. Star Articles 6.0. Multiple SQL injection vulnerabilities allow remote attackers to inject arbitrary SQL commands via (1) subcatid in article.list.php; (2) artid in article.print.php; (3) artid in article.comments.php; (4) artid in article.publisher.ph...
CVE-2008-7077
Multiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...
Sql injection
SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...
CVE-2008-7059
SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...
CVE-2008-7059
CVE-2008-7059 describes an SQL injection vulnerability in the index.php of One-News Beta 2, exploitable via the q parameter. This allows remote attackers to execute arbitrary SQL commands. The issue is classified with a CVSS v2 base score of 7.5 (HIGH) with network access, low complexity, and no ...
CVE-2008-7059
SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...
CVE-2008-7049
Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the 1 txtUsername parameter aka Username and 2 txtPassword parameter aka Password in a form generated by home.asp. NOTE: due to lack of details, it is not...
Sql injection
SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...
Sql injection
Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password field to an unspecified component, possibly agentlist.asp. NOTE: this issue was disclosed by an unreliable researcher, so it might be...
Sql injection
Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the 1 txtUsername parameter aka Username and 2 txtPassword parameter aka Password in a form generated by home.asp. NOTE: due to lack of details, it is not...
Sql injection
SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script AJPoll Database version allows remote attackers to execute arbitrary SQL commands via the ques parameter...
Sql injection
SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to execute arbitrary SQL commands via the u parameter. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...
CVE-2008-7044
A CVE for AJ Square Free Polling Script (AJPoll) Database exposes a SQL injection in admin/include/newpoll.php via the ques parameter. This allows remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, and availability. No remediation details are provided in the...
CVE-2008-7049
NatterChat is affected by SQL injection in login.asp for versions 1.1 and 1.12, exploitable via the (1) txtUsername and (2) txtPassword fields in the form generated by home.asp. The issue is caused by improper input handling that allows remote attackers to craft SQL commands. OpenVAS and CVE refe...