13279 matches found
Sql injection
SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to 1 popaccounts.aspx, 2 addressbook.aspx, and 3 emails.aspx...
CVE-2009-2554
SQL injection vulnerability in the search method in jobline.class.php in Jobline comjobline 1.1.2.2, 1.3.1, and possibly earlier versions, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the search parameter in a results action to index.php, which invokes th...
CVE-2009-2545
SQL injection vulnerability in Advanced Electron Forum AEF 1.x, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the filename in an uploaded attachment. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2009-2545
SQL injection vulnerability in Advanced Electron Forum AEF 1.x, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the filename in an uploaded attachment. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
NullLogic Groupware <= 1.2.7 Multiple Vulnerabilities
NullLogic Groupware is prone to multiple vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Sql injection
SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...
Sql injection
SQL injection vulnerability in modules.php in the CurrentIssue module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a summary action...
CVE-2008-6867
SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...
CVE-2008-6867
SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...
CVE-2009-2439
Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the 1 IndustryID parameter to category.php and the 2 SellerID parameter to supplier/viewcontactdetails.php. NOTE: this is a product that was developed by a...
Sql injection
SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute arbitrary SQL commands via the pageid parameter...
Sql injection
SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the empid parameter...
Sql injection
SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands via the cateid parameter in a list action...
CVE-2009-2427
SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the empid parameter...
CVE-2009-2423
SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands via the cateid parameter in a list action...
CVE-2009-2427
SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the empid parameter...
CVE-2009-2423
CVE-2009-2423 describes an SQL injection in the Ebay Clone 2009 project, specifically in category.php via the cate_id parameter in a list action, allowing remote attackers to execute arbitrary SQL commands. The vulnerability affects the web application as described in the CVE entry; underlying de...
Sql injection
Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 jahr or 2 idneu parameter in an archive action, or 3 the newsid parameter...
CVE-2009-2392
SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter...
CVE-2009-2395
SQL injection vulnerability in the K2 comk2 component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php...