CVE-2008-0799

SQL injection vulnerability in index.php in the Quiz comquiz 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

Sql injection

SQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute arbitrary SQL commands via the ssid parameter...

Sql injection

SQL injection vulnerability in index.php in the MGFi XfaQ comxfaq 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action...

Sql injection

SQL injection vulnerability in index.php in the McQuiz commcquiz 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

Sql injection

SQL injection vulnerability in index.php in the PAXXGallery compaxxgallery 0.2 component for Mambo and Joomla! allow remote attackers to execute arbitrary SQL commands via 1 the iid parameter in a view action, and possibly 2 the userid parameter...

Sql injection

SQL injection vulnerability in index.php in the MediaSlide commediaslide 0.5 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the albumnum parameter in a contact action...

CVE-2008-0802

SQL injection vulnerability in index.php in the MediaSlide commediaslide 0.5 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the albumnum parameter in a contact action...

CVE-2008-0796

CVE-2008-0796 is an SQL injection in Nuboard 0.5, exploitable via threads.php using the ssid parameter. The vulnerability allows remote SQL command execution. Connected sources confirm the affected component (threads.php) and input vector (ssid); no concrete remediation details are provided in th...

CVE-2008-0796

SQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute arbitrary SQL commands via the ssid parameter...

Sql injection

SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...

CVE-2008-0789

SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...

CVE-2008-0789

SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...

CVE-2008-0785

Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the 1 graphlist parameter to graphview.php, 2 leafid and id parameters to tree.php, 3 localgraphid parameter to graphxport.php, and 4...

CVE-2008-0785

Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the 1 graphlist parameter to graphview.php, 2 leafid and id parameters to tree.php, 3 localgraphid parameter to graphxport.php, and 4...

Sql injection

SQL injection vulnerability in Cisco Unified CallManager/Communications Manager CUCM 5.0/5.1 before 5.13a and 6.0/6.1 before 6.11a allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the 1 admin and 2 user interface pages...

CVE-2008-0026

Cisco Unified CallManager/Communications Manager (CUCM) versions affected: 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a). A SQL injection vulnerability exists in the key parameter of the admin and user interface pages, allowing an authenticated remote attacker to inject SQL commands. The atta...

Sql injection

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in Phil Taylor Comments comcomments, aka Review Script 0.5.8.5g and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the gdisplayorder cookie parameter...