11858 matches found
Sql injection
SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute arbitrary SQL commands via the mapid parameter in a showdetails action to 1 vbgooglemaphse.php and 2 mapa.php...
Sql injection
SQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute arbitrary SQL commands via the qID parameter...
Sql injection
SQL injection vulnerability in newsread.php in Pilot Group PG eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in successstory.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4711
SQL injection vulnerability in Joovili 3.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.blog.php, 2 view.event.php, 3 view.group.php, 4 view.music.php, 5 view.picture.php, and 6 view.video.php...
CVE-2008-4709
SQL injection vulnerability in newsread.php in Pilot Group PG eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4705
SQL injection vulnerability in successstory.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4703
SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter...
CVE-2008-4700
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...
CVE-2008-4701
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffuser cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details...
Sql injection
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...
Sql injection
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffuser cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details...
CVE-2008-4700
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...
CVE-2008-4665
SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...
Sql injection
SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to execute arbitrary SQL commands via the catid parameter in browse mode...
Sql injection
SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...
CVE-2008-4666
SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter...
CVE-2008-4651
Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 orderby parameter to admin/cms/images.php and the 2 navid parameter in an editrecord action to admin/cms/nav.php...
CVE-2008-4653
SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...