CVE-2008-0695

SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action...

Sql injection

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

CVE-2008-0719

The CVE-2008-0719 entry describes an SQL injection vulnerability in the customer_testimonials.php script of the osCommerce Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2. The flaw allows remote attackers to manipulate database queries via the testimonial_id parameter, po...

Sql injection

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the productid parameter, as demonstrated by a shop/flypage action...

Sql injection

SQL injection vulnerability in index.php in the Noticias comnoticias 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detalhe action...

CVE-2008-0692

SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-0682

SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news action...

CVE-2008-0721

SQL injection vulnerability in index.php in the Sermon comsermon 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter...

Sql injection

SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pre-1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

CVE-2008-0683

SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...

CVE-2008-0695

SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action...

CVE-2008-0678

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...

CVE-2008-0681

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the productid parameter, as demonstrated by a shop/flypage action...

CVE-2008-0670

The CVE-2008-0670 entry concerns the Joomla! Noticias (com_noticias) 1.0 component. A SQL injection flaw exists in index.php, exploitable via the id parameter in the detalhe action, allowing remote attackers to execute arbitrary SQL commands. This is documented across multiple sources (NVD and re...

CVE-2008-0689

SQL injection vulnerability in index.php in the Marketplace commarketplace 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a showcategory action...

CVE-2008-0692

SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in detail.php in Astanda Directory Project ADP 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

Sql injection

SQL injection vulnerability in login.php in Pedro Santana Codice CMS allows remote attackers to execute arbitrary SQL commands via the username field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action...