CVE-2007-3905

SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...

Sql injection

SQL injection vulnerability in philboardforum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: it was later reported that 2.0.1 is also affected...

Sql injection

Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the currentsubsection parameter to index.php and other unspecified vectors...

Sql injection

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3881

SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

CVE-2007-3889

Affected: Insanely Simple Blog 0.5 and earlier. Vulnerability: multiple SQL injection weaknesses allowing remote attackers to execute arbitrary SQL commands via the current_subsection parameter to index.php and other unspecified vectors. Root cause: improper input handling enabling injection. Imp...

CVE-2007-3882

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3889

Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the currentsubsection parameter to index.php and other unspecified vectors...

CVE-2007-3840

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter...

Sql injection

SQL injection vulnerability in katgoster.asp in MzK Blog tr allows remote attackers to execute arbitrary SQL commands via the katID parameter...

Sql injection

SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

Sql injection

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

CVE-2007-3808

SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories parameter in a search action to index.php, a different vector than CVE-2005-2000...

Sql injection

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the idurlo field in the deleteurlo function in a index.php in the urlobox module; the iden field in the 2 updatefile and 3 delfile functions in b index.php in the reviews module...

CVE-2007-3808

SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories parameter in a search action to index.php, a different vector than CVE-2005-2000...

Sql injection

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picturerealedit.asp, and probably other unspecified vectors...

Sql injection

SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL commands via the Password field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3013

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picturerealedit.asp, and probably other unspecified vectors...

CVE-2007-3789

The CVE-2007-3789 issue affects Inmostore 4.0, specifically the admin/index.php entry point. The vulnerability is a SQL injection in the Password field that permits remote attackers to execute arbitrary SQL commands. The available documents confirm the affected component (admin/index.php) and the...