Sql injection

SQL injection vulnerability in home.php in E-Annu allows remote attackers to execute arbitrary SQL commands via the a parameter...

CVE-2007-2416

SQL injection vulnerability in home.php in E-Annu allows remote attackers to execute arbitrary SQL commands via the a parameter...

CVE-2007-2373

SQL injection vulnerability in viewcat.php in the WF-Links wflinks 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-2370

CVE-2007-2370 : Concrete details across connected documents show a SQL injection in the XOOPS Jobs module (John Mordo Jobs) for XOOPS, affecting version 2.4 and earlier. The vulnerability resides in index.php (modules/jobs/index.php) where user input in the cid parameter of a jobsview action is n...

Sql injection

SQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-6083...

CVE-2007-2339

Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands via 1 a modified recipients parameter name in a pm.php; 2 the curr parameter to the b badwords aka censorlist or c banlist module in admin.php; or 3 the "Edit groups / Add group...

Sql injection

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

Sql injection

Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 dzial parameter to a katalog.php, or the 2 t parameter to b forum.php or c forum/viewtopic.php, different vectors than CVE-2006-4536...

Sql injection

Multiple SQL injection vulnerabilities in the Virtual War VWar 1.5.0 R15 module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the n parameter to extra/online.php and other unspecified scripts in extra/. NOTE: this might be same vulnerability as CVE-2006-4142; however,...

CVE-2007-2320

SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478...

CVE-2007-2299

Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 dzial parameter to a katalog.php, or the 2 t parameter to b forum.php or c forum/viewtopic.php, different vectors than CVE-2006-4536...

CVE-2007-2314

Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 pseudo or 2 passe parameter to a configurer.php, b connect.php, c delete.php, d delete2.php, e index.php, f infos.php,...

Sql injection

SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via the idsalon parameter...

CVE-2007-2259

SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via the idsalon parameter...

CVE-2007-2247

SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ripeformpost parameter...

Sql injection

SQL injection vulnerability in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a dayview action...

Sql injection

Multiple SQL injection vulnerabilities in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year or 2 month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2183

SQL injection vulnerability in index.php in PHP-Ring Webring System aka uPHPringwebsite 0.9 allows remote attackers to execute arbitrary SQL commands via the ring parameter...