11858 matches found
Sql injection
SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in popupimg.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute arbitrary SQL commands via the fotoID parameter. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...
Sql injection
SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2008-4880...
CVE-2008-4897
SQL injection vulnerability in fichiers/addurl.php in Logz podcast CMS 1.3.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the art parameter...
CVE-2008-4901
SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2008-4902
SQL injection vulnerability in contactauthor.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2008-4904
SQL injection vulnerability in the "Manage pages" feature admin/pages in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the searchpublishedat parameter...
CVE-2008-4900
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4895
SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4887
SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter in a 1 profile page profile.php or 2 game page game.php. NOTE: some of these details are obtained from third party information...
CVE-2008-4890
CVE-2008-4890: SQL injection in 1st News 4 Professional (PR 1) via the id parameter in products.php. Remote attackers could execute arbitrary SQL commands, with impact on confidentiality, integrity, and availability as described (partial across all). The vulnerability is documented with multiple ...
CVE-2008-4881
SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4879
CVE-2008-4879 is an SQL injection in Maran PHP Shop: the vulnerable file is prod.php and the issue arises from the cat parameter, allowing remote attackers to execute arbitrary SQL commands. This is a distinct vector from CVE-2008-4880. Public exploits exist (e.g., Exploit-DB 6953). No remediatio...
CVE-2008-4890
SQL injection vulnerability in products.php in 1st News 4 Professional PR 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4886
SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the c parameter...
Sql injection
SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...
Sql injection
Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField parameter to unspecified components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
