11858 matches found
Sql injection
SQL injection vulnerability in the research module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php...
CVE-2008-6032
SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php...
Sql injection
SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6032
SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6042
SQL injection vulnerability in the research module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php...
CVE-2008-6043
CVE-2008-6043 describes multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 . Remote attackers can execute arbitrary SQL commands via the order_field and order_type parameters to categories.php (and unspecified other components). The entry notes the details are partially from third-p...
CVE-2008-6033
The CVE-2008-6033 entry describes a SQL injection in WSN Links 2.20 within comments.php, exploitable via the id parameter to allow remote attackers to execute arbitrary SQL commands. The affected component is the comments.php handling in WSN Links 2.20; root cause is unsanitized input leading to ...
CVE-2008-6038
CVE-2008-6038 describes a SQL injection vulnerability in the MapCal 0.1 application where the parameter id in the editevent action of index.php can be manipulated to execute arbitrary SQL commands. This remote issue could allow attackers to alter or read data, depending on the database and privil...
CVE-2008-6026
SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in login.php in Pre Lecture Exercises PLEs CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter...
Sql injection
SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
CVE-2009-0395
SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
CVE-2009-0394
SQL injection vulnerability in login.php in Pre Lecture Exercises PLEs CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter...
Sql injection
SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-6017
SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...
Sql injection
SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...
Sql injection
SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."...
CVE-2008-6017
SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...
CVE-2008-6017
CVE-2008-6017 describes a SQL injection vulnerability in the PHP script messages.php of the I-Rater Basic application. The vulnerability is triggered via the idp parameter, allowing remote attackers to potentially execute arbitrary SQL commands. Connected sources corroborate the issue as a databa...