15315 matches found
CVE-2010-4268
SQL injection vulnerability in the Pulse Infotech Flip Wall comflipwall component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
CVE-2010-4273
SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4271
CVE-2010-4271 affects ImpressCMS prior to 1.2.3 RC2. The issue is a SQL injection that could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Remediation: upgrade to ImpressCMS 1.2.3 RC2 or later.
CVE-2010-4271
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
SQL Injection Vulnerability in Enano CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Enano CMS which could be exploited to execute arbitrary SQL commands in applications database. 1 SQL injection vulnerability in Enano CMS: CVE-2010-4780 An input validation error exists in the way application handles users...
CVE-2010-4271: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
2PRO Tube SQL injection Vulnerability
Exploit for php platform in category web applications ===================================== 2PRO Tube SQL injection Vulnerability ===================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...
CVE-2010-2635
SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admin Console JavaServer pages."...
Sql injection
SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admin Console JavaServer pages."...
PT-2010-4161
Name of the Vulnerable Software and Affected Versions IBM WebSphere Commerce version 6.0 before 6.0.0.10 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admin Console JavaServer pages." Recommendations...
Sql injection
SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...
PT-2010-5343
Name of the Vulnerable Software and Affected Versions Energine versions prior to 2.3.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the SQL injection vulnerability in the index.php file via the NRGNSID cookie. Recommendations For...
CVE-2010-4186: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4006
Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 namecondition or 2 namesearch parameter...
Sql injection
SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033...
Sql injection
SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646...
CVE-2010-4006
Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 namecondition or 2 namesearch parameter...
CVE-2010-4152: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646...