CVE-2010-4958

SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4957: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Questionnaire kequestionnaire extension before 2.2.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2011-1858

Name of the Vulnerable Software and Affected Versions Virtue Book Store affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bid parameter in the "book/detail.php" endpoint. Recommendations At the moment, there i...

PT-2011-1861

Name of the Vulnerable Software and Affected Versions Joomla! TimeTrack component version 1.2.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ct id parameter in a timetrack action to the "index.php" endpoint. Recommendations Fo...

PT-2011-1870

Name of the Vulnerable Software and Affected Versions Entrans versions 0.3.2 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sid parameter in the "poll.php" file. Recommendations For Entrans versions 0.3.2 and earlier, avoid...

PT-2011-1880

Name of the Vulnerable Software and Affected Versions Joomla! component com camelcitydb2 version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the "index.php" endpoint. Recommendations For version 2.2 of the...

PT-2011-1887

Name of the Vulnerable Software and Affected Versions TYPO3 extension festat versions prior to 0.2.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 0.2.4, update to version 0.2.4 or later to resolve the issue...

PT-2011-1892

Name of the Vulnerable Software and Affected Versions TYPO3 Questionnaire ke questionnaire extension versions prior to 2.2.3 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.2.3, update to version 2.2.3 or later t...

CVE-2010-4920

SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...

CVE-2010-4910

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

CVE-2010-4911

SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2010-4916

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...

CVE-2010-4905

SQL injection vulnerability in articledetails.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbizid parameter...

CVE-2010-4898

SQL injection vulnerability in the Gantry comgantry component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php...

CVE-2010-4899

SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4894

SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL commands via the name parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action...

Sql injection

SQL injection vulnerability in the Gantry comgantry component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php...

Sql injection

SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...