13289 matches found
CVE-2008-6233
SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitrary SQL commands via the recid parameter...
Sql injection
SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies spread out such false informations...
Sql injection
SQL injection vulnerability in buyerdetail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the 1 sid and 2 cid parameters...
CVE-2008-6230
SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6226
SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter...
CVE-2008-6227
The CVE-2008-6227 entry describes a SQL injection vulnerability in the buyer_detail.php component of a Pre Multi-Vendor Shopping Malls system. The vulnerability arises via the (1) sid and (2) cid parameters, allowing remote attackers to inject arbitrary SQL commands. The underlying root cause is ...
CVE-2008-6227
SQL injection vulnerability in buyerdetail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the 1 sid and 2 cid parameters...
CVE-2008-6233
SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitrary SQL commands via the recid parameter...
CVE-2008-6230
SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6220
SQL injection vulnerability in login.php in Simple Document Management System SDMS 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter...
Sql injection
SQL injection vulnerability in mypage.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary SQL commands via the trg parameter...
Sql injection
SQL injection vulnerability in pollresults.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6216
The CVE-2008-6216 entry describes a SQL injection vulnerability in the Venalsur Booking Centre Booking System for Hotels Group, specifically in the file cadena_ofertas_ext.php. The issue can be exploited remotely by supplying a crafted value to the OfertaID parameter, allowing execution of arbitr...
Sql injection
SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter...
CVE-2008-6202
SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 urun.asp, 2 admin/bayilistele.asp, 3 admin/urungruplistele.asp, and 4 admin/urunlistele.asp...
CVE-2008-6210
SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL commands via the imgid parameter in the gallerypic page...
CVE-2008-6209
SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-6204
Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to secure/admin/guncelle.asp, 2 kulad and sifre parameters to secure/admin/giris.asp, and 3 username and password to secure/admin/default.asp...
Sql injection
SQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...