11862 matches found
CVE-2008-1354
SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...
Sql injection
SQL injection vulnerability in viewcat.php in the bamaGalerie Bama Galerie 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year parameter in a dayview action to plugins/calendar/calendarbackend.php and the 2 page parameter to ajaxpbackend.php...
Sql injection
SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...
CVE-2008-1350
SQL injection vulnerability in kb.php in Fully Modded phpBB phpbbfm 80220 allows remote attackers to execute arbitrary SQL commands via the k parameter in an article action...
CVE-2008-1346
SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...
Sql injection
SQL injection vulnerability in kb.php in Fully Modded phpBB phpbbfm 80220 allows remote attackers to execute arbitrary SQL commands via the k parameter in an article action...
CVE-2008-1350
SQL injection vulnerability in kb.php in Fully Modded phpBB phpbbfm 80220 allows remote attackers to execute arbitrary SQL commands via the k parameter in an article action...
Sql injection
SQL injection vulnerability in Koobi CMS 4.2.3 through 4.3.0 allows remote attackers to execute arbitrary SQL commands via the categ parameter in a links action to index.php, a different vector than CVE-2008-1122...
CVE-2008-1336
CVE-2008-1336 is a SQL injection vulnerability in Koobi CMS 4.2.3–4.3.0 where an attacker can pass malicious input via the categ parameter in a links action to index.php, enabling arbitrary SQL execution. This is a different vector from CVE-2008-1122. Public references include Exploit-DB entries ...
Sql injection
SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter to modules.php...
CVE-2008-1316
SQL injection vulnerability in qtfindsearchov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in qtfindsearchov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-1316
SQL injection vulnerability in qtfindsearchov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idcatg parameter in a ViewCatg action to modules.php...
CVE-2008-1314
SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php...
Sql injection
SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php...
Sql injection
SQL injection vulnerability in archives.php in Gregory Kokanosky aka Greg's Place phpMyNewsletter 0.8 beta 5 and earlier allows remote attackers to execute arbitrary SQL commands via the msgid parameter...
Sql injection
Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 postid, 2 postcategoryid, 3 postyearmonth, and 4 staticpageid parameters; and unspecified other vectors...