CVE-2008-6042

SQL injection vulnerability in the research module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php...

CVE-2008-6043

CVE-2008-6043 describes multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 . Remote attackers can execute arbitrary SQL commands via the order_field and order_type parameters to categories.php (and unspecified other components). The entry notes the details are partially from third-p...

CVE-2008-6033

The CVE-2008-6033 entry describes a SQL injection in WSN Links 2.20 within comments.php, exploitable via the id parameter to allow remote attackers to execute arbitrary SQL commands. The affected component is the comments.php handling in WSN Links 2.20; root cause is unsanitized input leading to ...

CVE-2008-6032

SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6038

CVE-2008-6038 describes a SQL injection vulnerability in the MapCal 0.1 application where the parameter id in the editevent action of index.php can be manipulated to execute arbitrary SQL commands. This remote issue could allow attackers to alter or read data, depending on the database and privil...

CVE-2008-6026

SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in login.php in Pre Lecture Exercises PLEs CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter...

Sql injection

SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-0395

SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-0394

SQL injection vulnerability in login.php in Pre Lecture Exercises PLEs CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter...

Sql injection

SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields."...

Sql injection

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...

CVE-2008-6017

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...

CVE-2008-6017

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...

CVE-2008-6017

CVE-2008-6017 describes a SQL injection vulnerability in the PHP script messages.php of the I-Rater Basic application. The vulnerability is triggered via the idp parameter, allowing remote attackers to potentially execute arbitrary SQL commands. Connected sources corroborate the issue as a databa...

CVE-2008-6019

CVE-2008-6019 describes a SQL injection in the Web app EACOMM DO-CMS 3.0. The vulnerability is in index.php, exploitable via the p parameter to remotely execute arbitrary SQL commands. The documents do not provide remediation, affected versions beyond 3.0, or exploit details. No further public te...

Sql injection

SQL injection vulnerability in autor.php in OwnRS CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0384

SQL injection vulnerability in autor.php in OwnRS CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in the beamospetition combeamospetition 1.0.12 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mpid parameter in a sign action to index.php, a different vector than CVE-2008-3132...