11858 matches found
Sql injection
SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2008-6237
SQL injection vulnerability in software-description.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPSite 0.0.1 and 0.0.7, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the checkuser parameter aka username field, or 2 the checkpass parameter aka password field, to...
Sql injection
SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL commands via the loginemail parameter aka login field. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in the Phoca Documentation comphocadocumentation component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action to index.php...
CVE-2009-0703
SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-0704
The CVE-2009-0704 entry concerns a SQL injection vulnerability in the WSN Guest 1.23 application, specifically in search.php. The underlying issue is that the search parameter in an advanced action is used in a way that allows an attacker to inject arbitrary SQL commands, enabling remote executio...
CVE-2009-0704
SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands via the search parameter in an advanced action...
CVE-2009-0709
The CVE-2009-0709 entry describes a SQL injection vulnerability in PHPFootball 1.6, specifically in login.php where the user parameter can be used by remote attackers to execute arbitrary SQL commands. Affected component: PHPFootball 1.6 (login.php). Underlying cause: unsanitized user input leadi...
CVE-2008-6241
Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPSite 0.0.1 and 0.0.7, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the checkuser parameter aka username field, or 2 the checkpass parameter aka password field, to...
CVE-2008-6237
SQL injection vulnerability in software-description.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in the ResendEmail module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the userprefix parameter to modules.php...
Sql injection
SQL injection vulnerability in login.php in Simple Document Management System SDMS 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
Sql injection
SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
CVE-2008-6234
SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
CVE-2008-6234
SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
CVE-2008-6233
SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitrary SQL commands via the recid parameter...
Sql injection
SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies spread out such false informations...