CVE-2008-0649

SQL injection vulnerability in detail.php in Astanda Directory Project ADP 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

Sql injection

SQL injection vulnerability in index.php in the Ynews comynews 1.0.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showYNews action...

CVE-2008-0649

SQL injection vulnerability in detail.php in Astanda Directory Project ADP 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

Sql injection

SQL injection vulnerability in index.php in the amazOOP Awesom! comawesom 0.3.2component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter in a viewlist task...

Sql injection

SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

Sql injection

SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 SOBI2, comsobi2 2.5.3 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: the provenance of this information is unknown; the details are obtained...

Sql injection

SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL commands via the pic parameter in a showpic action...

CVE-2008-0603

SQL injection vulnerability in index.php in the amazOOP Awesom! comawesom 0.3.2component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter in a viewlist task...

CVE-2008-0614

SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL commands via the pic parameter in a showpic action...

CVE-2008-0616

SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2008-0601

SQL injection vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-0606

SQL injection vulnerability in index.php in the Shambo2 comshambo2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter...

CVE-2008-0611

SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0601

CVE-2008-0601 describes an SQL injection in All Club CMS (ACCMS)

WordPress DMSGuestbook Plugin <= 1.7.0 - SQL Injection

Because of this vulnerability in the administration panel, the authenticated administrators can execute arbitrary SQL commands via unspecified vectors. Solution Update the plugin...

Sql injection

SQL injection vulnerability in index.php in the CatalogShop comcatalogshop 1.0b1 componenent for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

CVE-2008-0562

SQL injection vulnerability in index.php in the Restaurant comrestaurant 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

CVE-2008-0538

Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL commands via the 1 password parameter to login.php, the 2 id parameter to display.php, and unspecified other vectors. NOTE: some of these details are obtained from third party...

Sql injection

Multiple SQL injection vulnerabilities in CandyPress CP 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the 1 idProduct and 2 options parameters to a ajax/ajaxoptInventory.asp, or the 2 recid parameter to b ajax/ajaxgetBrands.asp...

CVE-2008-0543

CVE-2008-0543 describes multiple SQL injection vulnerabilities in Pre Dynamic Institution . Remote attackers can execute arbitrary SQL commands through the (1) sloginid and (2) spass parameters to login.asp and siteadmin/login.asp . The reports do not provide explicit root cause details or confir...