11858 matches found
CVE-2008-5574
SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL commands via the u parameter...
Sql injection
SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2008-5573
SQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 Password and 2 username parameters...
CVE-2008-5578
Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via 1 the f parameter in a showforum action, 2 the u parameter in a profile action, 3 the viewcat parameter, or 4 a combination of scbuid and scbident...
CVE-2008-5582
SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter...
CVE-2008-5574
SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL commands via the u parameter...
CVE-2008-5561
SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 ficheproduct.php and 2 presentation.php...
CVE-2008-5559
SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2008-5573
SQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 Password and 2 username parameters...
CVE-2008-5561
The connected documents confirm CVE-2008-5561 as a SQL injection vulnerability in Netref 4.0. The issue affects the application’s fiche_product.php and presentation.php endpoints, where an unsafely handled id parameter enables remote attackers to execute arbitrary SQL commands. Root cause cited i...
CVE-2008-5571
CVE-2008-5571 describes an SQL injection vulnerability in the web app Professional Download Assistant 0.1 , specifically in admin/login.asp . An attacker can pass crafted values in the two fields, uname (user) or psw (passwd), to cause arbitrary SQL execution on the backend database. This can lea...
Sql injection
SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5486
SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5493
SQL injection vulnerability in track.php in PHPStore Wholesales aka Wholesale allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5496
SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
SQL injection vulnerability in admin.php in E-topbiz Domain Shop 2 allows remote attackers to execute arbitrary SQL commands via the passfromform parameter...