CVE-2008-6378

SQL injection vulnerability in calendarEventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6392

SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6380

SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

Sql injection

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter...

Sql injection

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

Sql injection

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start parameter...

Sql injection

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password pass parameter...

Sql injection

SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterprise allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

Sql injection

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6390

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6372

The CVE-2008-6372 entry describes a SQL injection in Ocean12 FAQ Manager Pro 1.0. The vulnerability affects default.asp in the Cat action, where the ID parameter can be manipulated to execute arbitrary SQL commands remotely. The root cause is improper input handling leading to SQL injection. Impa...

CVE-2008-6371

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2008-6378

SQL injection vulnerability in calendarEventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6376

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password pass parameter...

CVE-2008-6379

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6383

SQL injection vulnerability in SpeedTech Organization and Resource Manager Storm 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...

Sql injection

SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...