13310 matches found
CVE-2008-4161
SQL injection vulnerability in searchinv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and orderby parameters in a searchall action...
CVE-2008-4157
CVE-2008-4157 documents an SQL injection in phpVID (Vastal I-Tech) groups.php via the cat parameter affecting PHPVID 1.1 and later 1.2.3. Connected records confirm related SQL injection issues in phpVID 1.2.3 via the n parameter (and note that the cat vector is already covered by CVE-2008-4157), ...
Sql injection
SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the weobjectID parameter...
CVE-2008-4154
SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the weobjectID parameter...
CVE-2008-4154
SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the weobjectID parameter...
CVE-2008-4143
SQL injection vulnerability in categorysearch.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4142
SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the esid parameter...
CVE-2008-4145
SQL injection vulnerability in userreadlinks.php in Addalink 1.0 beta 4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...
CVE-2008-4148
The CVE-2008-4148 vulnerability affects the Drupal Mailhandler module (5.x up to 5.x-1.4; 6.x up to 6.x-1.4). Root cause: SQL queries are constructed without using the Drupal database API, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact and exploit deta...
CVE-2008-4086
SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...
CVE-2008-4092
SQL injection vulnerability in printfeature.php in myPHPNuke MPN before 1.8.88rc2 allows remote attackers to execute arbitrary SQL commands via the artid parameter...
CVE-2008-4091
SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...
CVE-2008-4082
SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php...
Sql injection
SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an addtocart action, a different vector than CVE-2007-2672...
Sql injection
SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote attackers to execute arbitrary SQL commands via the go parameter in a browse action...
Sql injection
SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...
Sql injection
SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php...
Sql injection
SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter...