CVE-2009-1818

SQL injection vulnerability in admin/adminmanager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an musername cookie in an add action...

CVE-2009-1816

SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter aka the username field. NOTE: some of these details are obtained from third party information...

CVE-2009-1813

Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via 1 the uNev parameter aka the username field or 2 the uJelszo parameter aka the Password field...

CVE-2009-1814

CVE-2009-1814 describes an SQL injection in mail.php of PHPenpals (v1.1 and earlier) allowing remote SQL command execution via the ID parameter. Consequences and patch details are not provided here beyond noting that the profile.php vector is covered by CVE-2006-0074; the connected records indica...

CVE-2009-1816

SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter aka the username field. NOTE: some of these details are obtained from third party information...

CVE-2009-1818

SQL injection vulnerability in admin/adminmanager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an musername cookie in an add action...

CVE-2009-1810

Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail action to 2...

Sql injection

Multiple SQL injection vulnerabilities in the getGalleryImage function in stadmin/galleryoutput.php in ST-Gallery 0.1 alpha, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 gallerycategory or 2 galleryshow parameter to example.php...

Sql injection

Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-1799

Multiple SQL injection vulnerabilities in the getGalleryImage function in stadmin/galleryoutput.php in ST-Gallery 0.1 alpha, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 gallerycategory or 2 galleryshow parameter to example.php...

CVE-2009-1804

Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-1778

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-1778

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-1766

SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a digg action...

CVE-2009-1766

SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1751

SQL injection vulnerability in listlist.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1747

SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to execute arbitrary SQL commands via the forumid parameter in a post action...