Sql injection

SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter...

Sql injection

Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 ucat parameter to upgrade.php and the 2 id parameter to linkadmin/edit.php...

Sql injection

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213...

CVE-2008-4176

SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL commands via the oyun parameter...

CVE-2008-4178

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4185

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213...

CVE-2008-4175

Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 ucat parameter to upgrade.php and the 2 id parameter to linkadmin/edit.php...

Sql injection

SQL injection vulnerability in searchinv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and orderby parameters in a searchall action...

CVE-2008-4173

SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI...

CVE-2008-4169

SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter...

CVE-2008-4171

SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...

Sql injection

SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI...

Sql injection

SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page pageid parameter...

Sql injection

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected...

Sql injection

SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter...

Sql injection

SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-4171

CVE-2008-4171 affects Invision Power Board (IPB) 2.2.x and 2.3.x, with a SQL injection in xmlout.php where the name parameter can be manipulated to execute arbitrary SQL commands. The NVD entry cites a remote attacker, with a base score of 7.5 (high) and impact on confidentiality, integrity, and ...

CVE-2008-4169

SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter...

CVE-2008-4171

SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-4173

SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI...