CVE-2010-4980

SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2010-4986

SQL injection vulnerability in detail.php in Simple Document Management System SDMS allows remote attackers to execute arbitrary SQL commands via the docid parameter...

CVE-2010-4989

SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...

CVE-2010-4991

SQL injection vulnerability in the NinjaMonials comninjamonials component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php...

CVE-2010-4992

SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the type parameter to add.html...

CVE-2010-4982

SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...

CVE-2010-4980

Summary of CVE-2010-4980 : This vulnerability affects iScripts ReserveLogic (versions 1.0 and 1.1) where the vulnerable input is the pid parameter in packagedetails.php (and/or id parameter in ReserveLogic variants). The underlying issue is SQL injection, allowing remote attackers to execute arbi...

CVE-2010-4983

CVE-2010-4983 describes a SQL injection in profile.php of iScripts CyberMatch 1.0, exploitable via the id parameter to execute arbitrary SQL commands. Impact includes partial confidentiality, integrity, and availability (CVSS v2 base score 7.5). The connected documents do not provide vendor/patch...

CVE-2011-1915

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2011-1904

Name of the Vulnerable Software and Affected Versions BrotherScripts BS Business Directory affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "articlesdetails.php" file. Recommendations At t...

CVE-2010-4982: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...

CVE-2010-4981: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-1915: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2011-1919

Name of the Vulnerable Software and Affected Versions My Kazaam Notes Management System affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through vectors involving the "Enter Reference Number Below" text box in...

PT-2011-1927

Name of the Vulnerable Software and Affected Versions Joomla! Payments Plus component version 2.1.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the type parameter to the "add.html" endpoint. Recommendations For version 2.1.5, consider...

PT-2011-1929

Name of the Vulnerable Software and Affected Versions Joomla! Jobs Pro component version 1.6.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the detailed results parameter to the "search jobs.html" endpoint. Recommendations For version 1.6.4...

PT-2011-3473

Name of the Vulnerable Software and Affected Versions Enspire Distribution Management Solution version 7.3.2.7 eClient version 7.3.2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Enspire Distribution Management Solution version 7.3.2.7,...

CVE-2011-3615

Multiple SQL injection vulnerabilities in Simple Machines Forum SMF before 1.1.15 and 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via vectors involving a 1 HTML entity or 2 display name. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in Simple Machines Forum SMF before 1.1.15 and 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via vectors involving a 1 HTML entity or 2 display name. NOTE: some of these details are obtained from third party information...