CVE-2008-3880

SQL injection vulnerability in zmhtmlviewevent.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter...

CVE-2008-3861

Multiple SQL injection vulnerabilities in phpMyRealty PMR 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in pages.php and 2 the pricemax parameter in search.php...

Sql injection

Multiple SQL injection vulnerabilities in phpMyRealty PMR 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in pages.php and 2 the pricemax parameter in search.php...

CVE-2008-3845

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help CSLH 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to 1 isxmlhttp.php and 2 isflush.php...

Sql injection

SQL injection vulnerability in listingview.php in Web Directory Script 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

Sql injection

Multiple SQL injection vulnerabilities in the comcontent component in MiaCMS 4.6.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 view, 2 category, or 3 blogsection action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Matterdaddy Market 1.1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 type parameters...

CVE-2008-3785

Multiple SQL injection vulnerabilities in the comcontent component in MiaCMS 4.6.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 view, 2 category, or 3 blogsection action to index.php...

CVE-2008-3780

SQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an editregistry action to index.php, 2 a vector involving the checkemail function, and other vectors...

Sql injection

SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter...

CVE-2008-3772

SQL injection vulnerability in categoriesportal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-3768

Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an editregistry action to index.php, 2 a vector involving the checkemail function, and other vectors...

Sql injection

SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3753

SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3754

SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3756

SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitrary SQL commands via the id parameter...