CVE-2008-1961

SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMGid parameter in a comments action...

CVE-2008-1957

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode...

Sql injection

SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the catid parameter in an add action. NOTE: this issue might be site-specific...

CVE-2008-1936

SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the catid parameter in an add action. NOTE: this issue might be site-specific...

Sql injection

SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-1939

Concrete details show SQL injection vulnerabilities in W1L3D4 Philboard components across multiple versions (e.g., 0.5, 1.0, 1.14, 1.2) via user-supplied parameters (forumid, id, topic) in various ASP scripts (admin/ paths and forum/ paths). The root cause is improper handling of input leading to...

CVE-2008-1934

SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-1919

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter...

Sql injection

SQL injection vulnerability in view.asp in DevWorx BlogWorx 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter...

Sql injection

SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magicquotesgpc is disabled and the database table prefix is known, allows remote authenticated users to execute arbitrary SQL commands via the submitinfo parameter in a link submission action. NOTE: it was later...

CVE-2008-1915

SQL injection vulnerability in view.asp in DevWorx BlogWorx 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-1921

SQL injection vulnerability in storepages/categorylist.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

Sql injection

SQL injection vulnerability in storepages/categorylist.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

CVE-2008-1921

SQL injection vulnerability in storepages/categorylist.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

Sql injection

Multiple SQL injection vulnerabilities in functions/displaypage.func.php in cpCommerce 1.1.0 allow remote attackers to execute arbitrary SQL commands via the 1 idproduct, 2 idmanufacturer, and 3 idcategory parameters to unspecified components. NOTE: this probably overlaps CVE-2007-2959 and...

CVE-2008-1911

SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via a cookpass cookie...

Sql injection

SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action...

Sql injection

SQL injection vulnerability in comment.php in PHP Knowledge Base PHPKB 1.5 and 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-1909

SQL injection vulnerability in comment.php in PHP Knowledge Base PHPKB 1.5 and 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...