CVE-2010-2438

SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php...

2daybiz Freelance script SQL injection Vulnerability

No description provided by source. Exploit Title: 2daybiz Freelance script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/freelancescript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: :::::::::::::::::::::::::...

CVE-2010-2354

SQL injection vulnerability in subscribe.php in Pilot Group PG eLMS Pro allows remote attackers to execute arbitrary SQL commands via the courseid parameter...

CVE-2010-2357

SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in subscribe.php in Pilot Group PG eLMS Pro allows remote attackers to execute arbitrary SQL commands via the courseid parameter...

Sql injection

SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-2357

SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids parameter in an updatepages action...

CVE-2010-2339

SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids parameter in an updatepages action...

CVE-2010-2338

Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-2338

The CVE-2010-2338 entry concerns multiple SQL injection vulnerabilities in redir.asp of VU Web Visitor Analyst, exploitable by passing crafted values to the (1) username or (2) password parameters to trigger arbitrary SQL execution. This is supported by the core description across NVD/NVD-derived...

CVE-2010-2339

SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids parameter in an updatepages action...

Sql injection

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter...

CVE-2010-2335

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter...

Sql injection

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search, 2 sbr, 3 pid, 4 sbl, and 5 FilePath parameters to default.asp; and the 6 sbr, 7 pr, and 8 psPrice parameters to printpage.asp...

Sql injection

SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-2319

SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action...

CVE-2009-4891

SQL injection vulnerability in index.php in CS-Cart 2.0.0 Beta 3 allows remote attackers to execute arbitrary SQL commands via the productid parameter in a products.view action...

Sql injection

Multiple SQL injection vulnerabilities in phpCommunity 2 2.1.8, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the forumid parameter in a forum action to index.php, 2 the topicid parameter in a forum action to index.php, 3 the wert parameter in an ...