CVE-2008-4531

CVE-2008-4531 covers a SQL injection in Brilliant Gallery 5.x (Drupal module) before 5.x-4.2, enabling an attacker to inject arbitrary SQL via unspecified vectors. The vulnerability relates to the broader issue described in CVE-2008-4338, which specifies the brilliant_gallery_checklist_save funct...

Sql injection

SQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute arbitrary SQL commands via the pic parameter...

CVE-2008-4524

SQL injection vulnerability in the "Check User" feature includes/checkuser.php in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4531

SQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to queries. NOTE: this might be the same issue as CVE-2008-4338...

CVE-2008-4527

SQL injection vulnerability in recept.php in the Recepies Recept module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the katid parameter in a kategorier action. NOTE: some of these details are obtained from third party information...

CVE-2008-4523

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4497

SQL injection vulnerability in eventdetail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

Sql injection

SQL injection vulnerability in viewcat.php in PHP Realtor 1.5 allows remote attackers to execute arbitrary SQL commands via the vcat parameter...

CVE-2008-4494

SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in eventdetail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

Sql injection

SQL injection vulnerability in searchresults.php in PHP Autos 2.9.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in viewcat.php in PHP Auto Dealer 2.7 allows remote attackers to execute arbitrary SQL commands via the vcat parameter...

Sql injection

SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4496

SQL injection vulnerability in viewcat.php in PHP Realtor 1.5 allows remote attackers to execute arbitrary SQL commands via the vcat parameter...

CVE-2008-4497

SQL injection vulnerability in eventdetail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2008-4494

SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4492

SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands via the usNick cookie...

Sql injection

SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands via the usNick cookie...

Sql injection

SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 sitename, 2 email, 3 themechosen, 4 hp, 5 cmeta, 6 id, and 7 cjs parameters. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

CVE-2008-4487

CVE-2008-4487 describes an SQL injection in Atarone CMS 1.2.0, specifically in ap-save.php. The vulnerability allows remote attackers to execute arbitrary SQL commands through the parameters: site_name, email, theme_chosen, hp, c_meta, id, and c_js. The entry notes that provenance is unknown and ...