11862 matches found
Sql injection
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the 1 queid parameter to forumanswer.php or 2 the catid parameter to search.php...
Sql injection
SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project aka Maan Bsat Photo Collection, but that w...
CVE-2007-4084
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via 1 the pgmid parameter in an uploadProducts action to merchants/index.php and possibly 2 the rowid parameter to merchants/temp.php...
CVE-2007-4056
SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project aka Maan Bsat Photo Collection, but that w...
CVE-2007-4076
Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the 1 productid or 2 catid parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...
Sql injection
SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-4054
CVE-2007-4054 is a SQL injection vulnerability in PHP123 Top Sites affecting category.php via the cat parameter. The vulnerability enables remote attackers to alter SQL commands due to improper input handling in the affected function, allowing access to or manipulation of the database. The NVD en...
CVE-2007-4054
SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL commands via the cat parameter...
CVE-2007-4085
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the 1 queid parameter to forumanswer.php or 2 the catid parameter to search.php...
CVE-2007-4055
SQL injection vulnerability in commentsget.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this may be related to CVE-2006-4300...
CVE-2007-4068
Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the katid parameter to the default URI in a download action or 2 the id parameter to the default URI in a duyurulardetay action...
CVE-2007-4053
SQL injection vulnerability in include/imgview.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to newimages.php...
CVE-2007-4069
CVE-2007-4069 is an SQL injection in show_cat.php of IndexScript 2.8 and earlier, exploitable via the cat_id parameter to execute arbitrary SQL remotely. The connected records also reference related CVEs (CVE-2007-4163) describing similar injection vectors in IndexScript 2.7/2.8, noting the show_...
Sql injection
SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Sql injection
SQL injection vulnerability in virlogin.asp in iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the Username parameter is covered by CVE-2006-6029. NOTE: the provenance of this information is unknown; the details are obtained solely...
Sql injection
SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter...
CVE-2007-3992
SQL injection vulnerability in virlogin.asp in iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the Username parameter is covered by CVE-2006-6029. NOTE: the provenance of this information is unknown; the details are obtained solely...
CVE-2007-3990
SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-3990
CVE-2007-3990 describes an SQL injection vulnerability in Dora Emlak 1.0, triggered when goster is set to emlakdetay and an arbitrary id parameter is supplied to default.asp. The root cause is unsafely constructed SQL queries, allowing remote attackers to execute arbitrary SQL commands. No exploi...