CVE-2009-1661

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

Sql injection

Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allow remote attackers to execute arbitrary SQL commands via the 1 myusername username and 2 password parameters. NOTE: some of these details are obtained from third part...

Sql injection

Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 Password fields, as reachable from admin/index.php...

Sql injection

SQL injection vulnerability in hotelhabitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allows remote attackers to execute arbitrary SQL commands via the HotelID parameter...

Sql injection

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2008-6809

SQL injection vulnerability in hotelhabitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allows remote attackers to execute arbitrary SQL commands via the HotelID parameter...

Sql injection

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2009-1651

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

Sql injection

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

Sql injection

Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the 1 user name userid parameter and 2 password...

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

CVE-2009-1651

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

Sql injection

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the ordersn parameter in an orderquery action...

Sql injection

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-6808

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2009-1626

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-6805

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...