CVE-2008-6202

Summary: CVE-2008-6202 describes a SQL injection vulnerability in CoBaLT 1.0 . The flaw allows remote attackers to execute arbitrary SQL commands through the id parameter on four endpoints: urun.asp, admin/bayi_listele.asp, admin/urun_grup_listele.asp, and admin/urun_listele.asp. The CVSS metrics...

CVE-2008-6204

CVE-2008-6204 concerns multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier. The affected components are the web admin endpoints: secure/admin/guncelle.asp (id parameter), secure/admin/giris.asp (kulad and sifre), and secure/admin/default.asp (username and password). The underl...

CVE-2008-6204

Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to secure/admin/guncelle.asp, 2 kulad and sifre parameters to secure/admin/giris.asp, and 3 username and password to secure/admin/default.asp...

CVE-2008-6209

SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-6198

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in sugcat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parentid parameter, a different vector than CVE-2007-4069...

CVE-2008-6188

SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skilledit parameter...

Sql injection

SQL injection vulnerability in the OwnBiblio comownbiblio component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalogue action to index.php...

Sql injection

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to 1 new/index.php, 2 news/index.php, and 3 top/topusers.php, which is not properly handled in database-pgsql.php...

Sql injection

SQL injection vulnerability in system/nlbuser.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie...

CVE-2008-6180

SQL injection vulnerability in system/nlbuser.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie...

Sql injection

SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skilledit parameter...

CVE-2008-6180

SQL injection vulnerability in system/nlbuser.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie...

Sql injection

SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...

CVE-2008-6165

SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...

Sql injection

SQL injection vulnerability in the KBase comkbase 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php...

CVE-2008-6165

SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...

CVE-2008-6165

CVE-2008-6165 refers to an SQL injection vulnerability in the PHP application component named gestion.php of CSPartner 0.1 . The flaw arises when magic_quotes_gpc is disabled , allowing remote attackers to inject arbitrary SQL via the parameters (1) pseudo and (2) passe . Exploitation details are...

CVE-2009-0646

Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 login and 2 password parameters to pcgi/4site.pl, 3 page parameter to print/print.shtml, 4 s and 5 i parameters to portfolio/index.shtml, 6 h parameter to...