CVE-2009-1852

Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields...

Sql injection

Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields...

Sql injection

SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter...

Sql injection

SQL injection vulnerability in the JoomlaMe AgoraGroups aka AG or comagoragroup component 0.3.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a groupdetail action to index.php...

CVE-2009-1850

SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2009-1853

Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA aka 2.0.0b and earlier allow remote attackers to execute arbitrary SQL commands via the 1 f and 2 t parameters in a showforum action...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA aka 2.0.0b and earlier allow remote attackers to execute arbitrary SQL commands via the 1 f and 2 t parameters in a showforum action...

CVE-2009-1852

Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields...

CVE-2009-1848

SQL injection vulnerability in the JoomlaMe AgoraGroups aka AG or comagoragroup component 0.3.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a groupdetail action to index.php...

CVE-2009-1853

Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA aka 2.0.0b and earlier allow remote attackers to execute arbitrary SQL commands via the 1 f and 2 t parameters in a showforum action...

Sql injection

SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header...

CVE-2009-1843

Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 quiz parameter to a numquestions.php, b answers.php, c highscore.php, d highscoreweb.php, e resultstableweb.php, and f question.php; and the 2 ordernumber parameter to g...

CVE-2009-1843

Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 quiz parameter to a numquestions.php, b answers.php, c highscore.php, d highscoreweb.php, e resultstableweb.php, and f question.php; and the 2 ordernumber parameter to g...

Sql injection

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 aka 0.9 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail...

Sql injection

SQL injection vulnerability in admin/adminmanager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an musername cookie in an add action...

CVE-2009-1813

Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via 1 the uNev parameter aka the username field or 2 the uJelszo parameter aka the Password field...

CVE-2009-1819

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter aka the username field. NOTE: some of these details are obtained from third party information...

CVE-2009-1812

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 aka 0.9 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail...