Sql injection

SQL injection vulnerability in picturepicbv.asp in SoftAcid Hotel Reservation System HRS Multi allows remote attackers to execute arbitrary SQL commands via the key parameter...

Sql injection

SQL injection vulnerability in the DT Register comdtregister 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a payoptions action to index.php...

CVE-2008-3266

SQL injection vulnerability in picturepicbv.asp in SoftAcid Hotel Reservation System HRS Multi allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2008-3266

SQL injection vulnerability in picturepicbv.asp in SoftAcid Hotel Reservation System HRS Multi allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2008-3256

SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a UserProfil action...

CVE-2008-3256

SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3254

SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a UserProfil action...

Sql injection

SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL commands via the filter parameter...

Sql injection

Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the opp parameter to tampereunited/opponent.php; or the id parameter to 2 index.php, 3 player.php, 4 matchdetails.php, or 5 additionalpage.php in tampereunited/...

CVE-2008-3251

Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the opp parameter to tampereunited/opponent.php; or the id parameter to 2 index.php, 3 player.php, 4 matchdetails.php, or 5 additionalpage.php in tampereunited/...

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

Sql injection

SQL injection vulnerability in players-detail.php in UltraStats 0.2.136, 0.2.140, and 0.2.142 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3241

SQL injection vulnerability in players-detail.php in UltraStats 0.2.136, 0.2.140, and 0.2.142 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execute arbitrary SQL commands via the viewCat parameter...

Sql injection

SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action...

CVE-2008-3240

SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action...

Sql injection

SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."...

CVE-2008-3223

SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."...