cisco-sql.txt

SUMMARY ======= A SQL injection vulnerability exists in the Log On page of the web interface for Cisco CallManager AKA Unified Communications Manager. An unauthenticated attacker who is able to access the Log On page could exploit this vulnerability to run arbitrary SQL commands as the logged in...

CVE-2007-4604

CVE-2007-4604 affects DL PayCart 1.01, with a SQL injection in viewitem.php via the ItemID parameter. The underlying issue is unsafely constructed SQL queries that allow remote attackers to execute arbitrary SQL commands. Available references confirm the vulnerability description but do not provi...

CVE-2007-4611

SQL injection vulnerability in viewevent.php in Moonware aka Dale Mooney Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to execute arbitrary SQL commands via the scid parameter in a searchlist action, a different vector than CVE-2007-2549...

CVE-2007-4581

SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...

Sql injection

SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2007-4581

SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...

Sql injection

SQL injection vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary SQL commands via the blockpage parameter. NOTE: as of 20070827, the vendor has made conflicting statements regarding whether this issue exists or not...

Sql injection

Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c navigation/deleteitem.php ...

CVE-2007-4522

Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c navigation/deleteitem.php ...

CVE-2007-4522

Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c navigation/deleteitem.php ...

CVE-2007-4522

CVE-2007-4522 affects Ripe Website Manager

Sql injection

SQL injection vulnerability in index.php in the BibTeX component comjombib 1.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the afilter parameter...

Sql injection

SQL injection vulnerability in index.php in the Nice Talk component comnicetalk 0.9.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the tagid parameter...

Sql injection

SQL injection vulnerability in index.php in the EventList component comeventlist 0.8 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the did parameter in a details action...

CVE-2007-4509

CVE-2007-4509 describes a SQL injection in Joomla!’s EventList component (com_eventlist) versions 0.8 and earlier. The vulnerability arises in the index.php file when processing the details action with theDid parameter, allowing remote attackers to execute arbitrary SQL commands. Impact and remed...

CVE-2007-4506

SQL injection vulnerability in index.php in the NeoRecruit component comneorecruit 1.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an offerview action...

Sql injection

SQL injection vulnerability in uyeler2.php in Gurur haber 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4491

SQL injection vulnerability in uyeler2.php in Gurur haber 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4491

CVE-2007-4491 : SQL injection in the PHP module uyeler2.php of Gurur haber 2.0. The vulnerability arises from the id parameter, enabling remote attackers to execute arbitrary SQL commands. CVSSv2 base score 7.5 (HIGH) with network attack vector and low attack complexity; no exploitation status is...