13320 matches found
CVE-2008-6254
SQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...
Sql injection
SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinforecurring parameter, a different vector than CVE-2005-3022...
Sql injection
Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 answer parameter to admincp/verify.php, 2 extension parameter in an edit action to admincp/attachmentpermission.php, and the 3 iperm parameter to...
CVE-2008-6261
SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL commands via the group parameter...
CVE-2008-6264
SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2008-6258
SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the 1 UserID and 2 Pwd parameters. NOTE: this might be related to CVE-2004-2108...
CVE-2008-6257
OpenASP 3.0 and earlier are affected by a SQL injection in default.asp (pages module) via the idpage parameter, allowing remote execution of arbitrary SQL commands. Root cause: unsafe SQL construction in the pages module. Affected: Openasp 3.0 and earlier. CVSS indicates high impact with partial ...
CVE-2008-6254
SQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...
CVE-2008-6263
SQL injection vulnerability in lib/user/tuser.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the username parameter to the userLoggedIn function. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in category.php in Scripts For Sites SFS EZ Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter...
Sql injection
SQL injection vulnerability in SearchResults.php in Scripts For Sites SFS EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter...
CVE-2008-6250
SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter to a blog page...
CVE-2008-6244
SQL injection vulnerability in viewreviews.php in Scripts for Sites SFS EZ Gaming Cheats allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6247
SQL injection vulnerability in topsite.php in Scripts For Sites SFS EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter...
CVE-2008-6249
SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in showcategory.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
SQL injection vulnerability in topsite.php in Scripts For Sites SFS EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter...