13315 matches found
CVE-2009-4892
SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 portfoliogenre.php and 2 newsid.php...
Sql injection
SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php...
SQL Injection Vulnerabilities in Mac's CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Mac's CMS which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Mac's CMS 1.1 The vulnerability exists due to input sanitation errors in the “commentId” parameter in index.ph...
Sql injection
SQL injection vulnerability in indexie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter...
Sql injection
SQL injection vulnerability in EMC RSA Key Manager RKM C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL commands via the metadata section of encrypted key data...
CVE-2010-1904
SQL injection vulnerability in EMC RSA Key Manager RKM C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL commands via the metadata section of encrypted key data...
CVE-2010-1904
RSA Key Manager (RKM) C Client 1.5.x is vulnerable to SQL injection via the metadata in encrypted data, allowing an attacker to manipulate the KeyTable/config caching data and potentially modify or delete encryption keys. The vulnerability arises from improper validation of metadata during key lo...
CVE-2010-2148
SQL injection vulnerability in the My Car commycar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pagina parameter to index.php...
Sql injection
SQL injection vulnerability in the My Car commycar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pagina parameter to index.php...
Sql injection
SQL injection vulnerability in itemdetail.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action...
Sql injection
SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2010-2142
SQL injection vulnerability in default.asp in Cyberhost allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-2139
SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2010-2140
SQL injection vulnerability in itemdetail.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942...
Sql injection
Multiple SQL injection vulnerabilities in login.php in Project Man 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter...
Sql injection
SQL injection vulnerability in the Calendar Base cal extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data...