11862 matches found
Sql injection
SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action...
Sql injection
SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-6084
SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-6091
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System JBS 2.0, and possibly JiRo's Upload Manager aka JiRo's Upload System or JUS, allow remote attackers to execute arbitrary SQL commands via the 1 Username aka Login or Email or 2 Password field...
Sql injection
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter. NOTE: it was later reported that 1.0.13 is also affected...
Sql injection
Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 nctop.asp; 2 incbookmarks.asp, possibly involving a parameter passed from cpmain.asp; 3 incprofilefunctions.asp; or 4 incSUBSCRIPTIONS.asp; or the 5...
CVE-2007-6078
Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 nctop.asp; 2 incbookmarks.asp, possibly involving a parameter passed from cpmain.asp; 3 incprofilefunctions.asp; or 4 incSUBSCRIPTIONS.asp; or the 5...
CVE-2007-6058
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 codes action in the profile-codes module, 2 videos action in the video-codes module, or 3 games action in the arcade-games module...
Sql injection
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 codes action in the profile-codes module, 2 videos action in the video-codes module, or 3 games action in the arcade-games module...
CVE-2007-6058
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 codes action in the profile-codes module, 2 videos action in the video-codes module, or 3 games action in the arcade-games module...
Sql injection
SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...
CVE-2007-6035
SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...
Sql injection
SQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows remote attackers to execute arbitrary SQL commands via the mode parameter...
CVE-2007-6012
SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter aka the search section. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter aka the search section. NOTE: some of these details are obtained from third party information...
CVE-2007-6012
SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter aka the search section. NOTE: some of these details are obtained from third party information...
CVE-2004-2754
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the IDMEMBER parameter to the 1 recentTopics and 2 welcome functions...
Sql injection
SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in a profile fn action...
Sql injection
Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...