CVE-2008-0546

Multiple SQL injection vulnerabilities in CandyPress CP 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the 1 idProduct and 2 options parameters to a ajax/ajaxoptInventory.asp, or the 2 recid parameter to b ajax/ajaxgetBrands.asp...

Sql injection

SQL injection vulnerability in index.php in the fq comfq component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter...

Sql injection

SQL injection vulnerability in index.php in the Newsletter comnewsletter component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter...

Sql injection

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent comestateagent 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action...

CVE-2008-0515

SQL injection vulnerability in index.php in the musepoes commusepoes component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action...

Sql injection

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery CPG before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 albumid, 2 startpic, and 3 numpics parameters to util.php; and 4 cidarray parameter to reviewcom.php...

Sql injection

SQL injection vulnerability in index.php in the musepoes commusepoes component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action...

Sql injection

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 fromdate or 2 todate parameter to spy.php...

CVE-2008-0517

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent comestateagent 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action...

CVE-2008-0512

SQL injection vulnerability in index.php in the fq comfq component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter...

CVE-2008-0504

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery CPG before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 albumid, 2 startpic, and 3 numpics parameters to util.php; and 4 cidarray parameter to reviewcom.php...

CVE-2008-0515

SQL injection vulnerability in index.php in the musepoes commusepoes component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action...

CVE-2008-0511

SQL injection vulnerability in index.php in the MaMML commamml component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter...

CVE-2008-0519

SQL injection vulnerability in index.php in the Atapin Jokes comjokes 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a CatView action...

CVE-2008-0520

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 fromdate or 2 todate parameter to spy.php...

CVE-2008-0491

SQL injection vulnerability in fimrss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter...

CVE-2008-0499

SQL injection vulnerability in Mambo LaiThai 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-0490

SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...