11862 matches found
CVE-2007-4918
SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post parameter to index.php...
CVE-2007-4894
Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...
Sql injection
Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...
CVE-2007-4894
Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...
Sql injection
SQL injection vulnerability in profile/myprofile.php in psi-labs.com social networking script psisns, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the u parameter...
Sql injection
SQL injection vulnerability in start.php in Webace-Linkscript wls 1.3 Special Edition SE allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik go action...
CVE-2007-4846
SQL injection vulnerability in start.php in Webace-Linkscript wls 1.3 Special Edition SE allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik go action...
Sql injection
Multiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow remote attackers to execute arbitrary SQL commands via the 1 dlid or 2 cid parameter...
CVE-2007-4846
SQL injection vulnerability in start.php in Webace-Linkscript wls 1.3 Special Edition SE allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik go action...
Sql injection
SQL injection vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action...
Sql injection
SQL injection vulnerability in anket.asp in Proxy Anket 3.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-4837
SQL injection vulnerability in anket.asp in Proxy Anket 3.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-4835
The CVE-2007-4835 entry describes an SQL injection in phpMyQuote 0.20, exploitable via the id parameter in an edit action of index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, as indicated by the description and multiple sources (NVD entry). The root cause is ...
CVE-2007-4837
SQL injection vulnerability in anket.asp in Proxy Anket 3.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to news.php in a lirenews action, 2 the idnews parameter to goodies.php in a lire action, 3 the id parameter to file.php in a voir action, 4 the ID parameter to...
Sql injection
Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 hal.php, 2 cetak.php, 3 lihat.php, 4 pesan.php, and 5 teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to t...
CVE-2007-4804
AuraCMS 1.5rc is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands through the id parameter in hal.php, cetak.php, lihat.php, pesan.php, and teman.php. In some cases the scripts are reachable via requests to the product’s top-level UR...
Sql injection
Multiple SQL injection vulnerabilities in the content component comcontent in Joomla! 1.5 Beta1, Beta2, and RC1 allow remote attackers to execute arbitrary SQL commands via the filter parameter in an archive action to 1 archive.php, 2 category.php, or 3 section.php in models/. NOTE: this may be t...
Sql injection
Multiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 pass fields, different vectors than CVE-2007-0092...