CVE-2008-2629

SQL injection vulnerability in the LifeType formerly pLog module for Drupal allows remote attackers to execute arbitrary SQL commands via the albumId parameter in a ViewAlbum action to index.php...

Sql injection

SQL injection vulnerability in the Simple Shop Galore comsimpleshop component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php...

Sql injection

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter...

CVE-2008-2560

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter...

Sql injection

SQL injection vulnerability in the EasyBook comeasybook component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a deleteentry action to index.php...

CVE-2008-2565

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.php and 2 edit.php. NOTE: it was later reported that 4.0.x is also affected...

Sql injection

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...

CVE-2008-2568

SQL injection vulnerability in the Simple Shop Galore comsimpleshop component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php...

CVE-2008-2572

CVE-2008-2572 describes a SQL injection in FlashBlog’s php/leer_comentarios.php, exploitable via the articulo_id parameter. The issue is a web-remote injection in a PHP script, leading to arbitrary SQL execution. The vulnerability is documented with a CVSS v2 base score of 7.5 (HIGH), indicating ...

CVE-2008-2572

SQL injection vulnerability in php/leercomentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL commands via the articuloid parameter...

CVE-2008-2562

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...

CVE-2008-2560

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter...

Sql injection

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...

Sql injection

Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp and 2 cat parameter to templatearchivescat.asp...

Sql injection

SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2008-2556

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...

CVE-2008-2554

Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp and 2 cat parameter to templatearchivescat.asp...

CVE-2008-2555

SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2008-2556

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...

CVE-2008-2556

The CVE-2008-2556 entry documents a SQL injection vulnerability in read.php of PHP Visit Counter 0.4 and earlier, exploitable via the datespan parameter in a read action. The vulnerability originates from unsafely incorporating the datespan input into SQL queries, enabling remote attackers to exe...