11862 matches found
CVE-2007-5233
SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a readmore action...
Sql injection
SQL injection vulnerability in index.php in MAXdev MDPro MD-Pro 1.0.76 allows remote attackers to execute arbitrary SQL commands via a "Firefox ID=" substring in a Referer HTTP header...
CVE-2007-5222
SQL injection vulnerability in index.php in MAXdev MDPro MD-Pro 1.0.76 allows remote attackers to execute arbitrary SQL commands via a "Firefox ID=" substring in a Referer HTTP header...
CVE-2007-5220
SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters...
Sql injection
SQL injection vulnerability in index.php in the MambAds commambads 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter...
Sql injection
SQL injection vulnerability in infusions/calendareventspanel/showsingle.php in the Expanded Calendar 2.x module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the sel parameter...
CVE-2007-5177
SQL injection vulnerability in index.php in the MambAds commambads 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter...
CVE-2007-5181
SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilanid parameter...
Sql injection
Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands via the 1 Kategori parameter in satilik.asp and the 2 Emlak parameter in detay.asp...
Sql injection
Multiple SQL injection vulnerabilities in mesadd.php in x-script GuestBook 1.3a, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 icq, and 4 website parameters...
Sql injection
SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilanid parameter...
CVE-2007-5181
SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilanid parameter...
CVE-2007-5189
Multiple SQL injection vulnerabilities in mesadd.php in x-script GuestBook 1.3a, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 icq, and 4 website parameters...
CVE-2007-5180
CVE-2007-5180 describes multiple SQL injection vulnerabilities in Ohesa Emlak Portali, allowing remote attackers to execute arbitrary SQL via (1) Kategori in satilik.asp and (2) Emlak in detay.asp. Root cause is improper input handling for these parameters, enabling unsanitized input to be embedd...
CVE-2007-5084
Multiple SQL injection vulnerabilities in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes 1 0x07, 2 0x08, 3 0x09, 4 0x1E, 5 0x32, 6 0x36, 7 0x40, and possibly others...
Sql injection
SQL injection vulnerability in the abgetadmin function in includes/nukesentinel.php in NukeSentinel 2.5.12 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie...
CVE-2007-5151
CVE-2007-5151 affects NukeSentinel 2.5.12: the abget_admin function in includes/nukesentinel.php is vulnerable to SQL injection via base64-encoded data in an admin cookie, allowing remote SQL execution. Documentation shows the vulnerability but provides no patch details in the connected sources; ...
CVE-2007-5141
SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to execute arbitrary SQL commands via the search parameter...
Sql injection
SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...