Sql injection

SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the catid parameter to a site-specific component name such as link.php or backlinkspider.php...

CVE-2008-2096

CVE-2008-2096 is a SQL injection vulnerability in BackLinkSpider. The issue allows remote attackers to execute arbitrary SQL via the cat_id parameter to site components such as link.php or backlinkspider.php. Affected component is BackLinkSpider; underlying cause is unsafely handled input in the ...

Sql injection

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in the Profiler comcomprofiler component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php...

CVE-2008-2093

The CVE-2008-2093 issue is a real SQL injection in the Profiler (com_comprofiler) component used by Community Builder for Mambo and Joomla!. The vulnerability allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php. This affects the co...

Sql injection

SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...

CVE-2008-2087

SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...

CVE-2008-2083

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-2084

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a listarticles action...

Sql injection

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a listarticles action...

CVE-2008-2063

SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category parameter...

Sql injection

SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via the catagorie parameter...

Sql injection

SQL injection vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...

Sql injection

SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-2065

SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via the catagorie parameter...

CVE-2008-2063

SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category parameter...

Sql injection

Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 hpz/profil.asp and 2 hpz/prodetail.asp...

CVE-2008-2047

Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 hpz/profil.asp and 2 hpz/prodetail.asp...

CVE-2008-2047

Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 hpz/profil.asp and 2 hpz/prodetail.asp...