11858 matches found
CVE-2009-0447
Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the user parameter aka UserName field or 2 the pass parameter aka Pass field to a admin/admin.asp or b the default URI under admin/. NOTE: some of these detai...
CVE-2009-0445
SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL commands via the exhibitionid parameter in a gallery.viewPhotos action...
CVE-2008-6064
Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...
CVE-2008-6064
Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...
CVE-2008-6064
CVE-2008-6064 involves multiple SQL injection vulnerabilities in DomPHP 0.81. The documented vector: remote attackers can inject via the cat parameter to agenda/index.php, with additional unspecified vectors also possible. The issue is due to inadequate input sanitization, enabling arbitrary SQL ...
Sql injection
SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
SQL injection vulnerability in the Eventing comeventing 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
Sql injection
SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter...
Sql injection
SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2009-0420
SQL injection vulnerability in the RD-Autos comrdautos 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
CVE-2009-0428
SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirection parameter...
CVE-2009-0428
SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in 1 optinout.php.inc, 2 confirmation.php.inc, and 3 renewal.php.inc in mailinglist/...
Sql injection
Rejected reason: SQL injection vulnerability in index.php in TinyMCE 2.0.1 allows remote attackers to execute arbitrary SQL commands via the menuID parameter. NOTE: CVE and multiple reliable third parties dispute this issue, since TinyMCE does not contain index.php or any PHP code. This may be an...
Sql injection
SQL injection vulnerability in offlineauth.php in Max.Blog 1.0.6 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...
Sql injection
SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the var parameter...
CVE-2009-0401
SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...