15330 matches found
CVE-2010-1336
INVOhost 3.4 is affected by multiple SQL injection vulnerabilities. The CVE-2010-1336 entry states remote attackers can execute arbitrary SQL via (1) id and (2) newlanguage parameters to site.php, (3) search parameter to manuals.php, and (4) unspecified vectors to faq.php. The OpenVAS/Duplicate e...
CVE-2010-1343
SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...
CVE-2010-1336
Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 newlanguage parameters to site.php, 3 search parameter to manuals.php, and 4 unspecified vectors to faq.php. NOTE: some of these details are obtained from third party...
Sql injection
SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2010-1331: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2010-1343: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...
CVE-2010-1301
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...
Sql injection
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...
CVE-2010-1300
The CVE-2010-1300 entry documents a SQL injection in Yamamah (aka Dove Photo Album) 1.00, exploitable via the calbums parameter in index.php. The underlying issue is improper handling of user-supplied input, allowing an attacker to inject arbitrary SQL commands. Impact as described aligns with pa...
CVE-2010-1301
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...
CVE-2010-0400
SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...
Sql injection
SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...
CVE-2010-0400
SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...
CVE-2010-0400: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...
Sql injection
SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter...
CVE-2010-1271
SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter...
Sql injection
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the idauk parameter...
CVE-2010-1265
SQL injection vulnerability in Adam Corley dcsFlashGames comdcsflashgames allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...