Sql injection

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the checkuser parameter aka username field, or 2 the checkpass parameter aka password field, to...

Sql injection

SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...

Sql injection

Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary SQL commands via 1 the loginname parameter aka the username field or 2 the loginpw parameter aka the password field...

Sql injection

SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL commands via the idestablecimiento parameter...

Sql injection

SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL commands via the iddocument parameter...

CVE-2009-1346

SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL commands via the idestablecimiento parameter...

CVE-2008-6728

SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...

CVE-2009-1345

The vulnerability CVE-2009-1345 affects cpCommerce 1.2.8, specifically the document.php component. It enables a SQL injection via the id_document parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation details or in-the-wild context are not provided in the connected d...

Sql injection

Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to eventsview.php and the 2 id parameter to eventsclndrview.php...

Sql injection

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1317

Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 userSID cookie parameter to droplets/functions/base.php and the 2 username parameter to admin/index.php...

CVE-2009-1323

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6721

SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers to execute arbitrary SQL commands via the txtName parameter aka the username field...

Sql injection

SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers to execute arbitrary SQL commands via the txtName parameter aka the username field...

Sql injection

SQL injection vulnerability in admin/admlogin.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka the admin field...

Sql injection

SQL injection vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Sql injection

SQL injection vulnerability in Fussballtippspiel toto 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6686

SQL injection vulnerability in CoolURI cooluri 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Sql injection

SQL injection vulnerability in Random Prayer steprayer 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Sql injection

SQL injection vulnerability in Diocese of Portsmouth Calendar Today pdcalendartoday extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...