13291 matches found
Sql injection
SQL injection vulnerability in fulltxt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5289
SQL injection vulnerability in fulltxt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5293
SQL injection vulnerability in index.php in WebStudio eHotel allows remote attackers to execute arbitrary SQL commands via the pageid parameter...
CVE-2008-5294
SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL commands via the pageid parameter...
CVE-2008-5267
SQL injection vulnerability in answer.php in Experts 1.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the questionid parameter...
Sql injection
SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the TopicId parameter...
Sql injection
SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter...
Sql injection
SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter...
Sql injection
SQL injection vulnerability in answer.php in Experts 1.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the questionid parameter...
Sql injection
SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands via the shownews parameter...
CVE-2008-5267
SQL injection vulnerability in answer.php in Experts 1.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the questionid parameter...
CVE-2008-5268
SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the TopicId parameter...
CVE-2008-5270
SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter...
Sql injection
Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...
CVE-2008-2429
Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...
CVE-2008-2429
Summary of CVE-2008-2429 (Calendarix Basic): Two SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 affect the catsearch and catview parameters (cal_search.php and cal_cat.php). The vulnerabilities arise because user input is not properly sanitized before being used in SQL queries, en...
Sql injection
SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...
Sql injection
SQL injection vulnerability in the MambAds commambads component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the macat parameter in a view action to index.php, a different vector than CVE-2007-5177...