11862 matches found
Sql injection
Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 loginname aka Username and 2 loginpass aka Password parameters to caladmin.php...
CVE-2007-6164
Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 reviews.php, 2 links.php and 3 articles.php...
CVE-2007-6163
CVE-2007-6163: Concrete details across connected sources show a SQL injection vulnerability in admin/index2.asp of GOUAE DWD Realty. The pword (Password) parameter is exploitable to execute arbitrary SQL commands, enabling remote attackers to interact with the database. Related entries also note ...
CVE-2007-6159
SQL injection vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to execute arbitrary SQL commands via the aarstal parameter in a yeardetail action, a different vector than CVE-2006-1500...
CVE-2007-6168
CVE-2007-6168 affects VU Case Manager: SQL injection in default.asp (Login Page) via the username parameter, enabling remote SQL execution. This is a different vector from CVE-2007-6143, which uses the password parameter. No remediation or exploit details are provided in the supplied documents.
Sql injection
SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php. NOTE: some of these details are obtained from third party information...
CVE-2007-6140
Multiple SQL injection vulnerabilities in Dora Emlak 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a emlakdetay.asp and b haberdetay.asp, the 2 kategori parameter to c kategorisirala.asp, and the 3 tip parameter to d tipsirala.asp...
CVE-2007-6143
SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...
Sql injection
SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2007-6137
SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php. NOTE: some of these details are obtained from third party information...
Sql injection
Multiple SQL injection vulnerabilities in Dora Emlak 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a emlakdetay.asp and b haberdetay.asp, the 2 kategori parameter to c kategorisirala.asp, and the 3 tip parameter to d tipsirala.asp...
CVE-2007-6143
SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2007-6125
SQL injection vulnerability in searchform.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitrary SQL commands via the sbprotype parameter...
CVE-2007-6128
SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL commands via the idevent parameter...
CVE-2007-6127
Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the year parameter to 1 view.page.inc.php, which is reachable through a view action to index.php; or 2 the year parameter to news.page.inc.php, which is reachabl...
Sql injection
SQL injection vulnerability in searchform.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitrary SQL commands via the sbprotype parameter...
Sql injection
SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL commands via the idevent parameter...
Sql injection
Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the year parameter to 1 view.page.inc.php, which is reachable through a view action to index.php; or 2 the year parameter to news.page.inc.php, which is reachabl...
CVE-2007-6127
Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the year parameter to 1 view.page.inc.php, which is reachable through a view action to index.php; or 2 the year parameter to news.page.inc.php, which is reachabl...