13313 matches found
Sql injection
SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
Multiple SQL injection vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors...
Sql injection
SQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers to execute arbitrary SQL commands via the file parameter...
Sql injection
SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-3124
SQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers to execute arbitrary SQL commands via the file parameter...
CVE-2008-3123
SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the listingid parameter in a listings action...
CVE-2008-3119
SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-3118
SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...
CVE-2008-3092
SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3092
SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3090
Multiple SQL injection vulnerabilities in index.php in BlognPlus BURO GUN + 2.5.5 MySQL and PostgreSQL editions allow remote attackers to execute arbitrary SQL commands via the 1 p, 2 e, 3 d, and 4 m parameters, a different vulnerability than CVE-2008-2819...
Sql injection
SQL injection vulnerability in class/page.php in Farsi Script aka FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328...
CVE-2007-1899
Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via 1 the userid parameter in a viewuser action to index.php, and allow remote authenticated administrators to execute arbitrary SQL commands via 2 the postid parameter in ...
Sql injection
SQL injection vulnerability in Brightcode Weblinks combrightweblinks component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1899
Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via 1 the userid parameter in a viewuser action to index.php, and allow remote authenticated administrators to execute arbitrary SQL commands via 2 the postid parameter in ...
CVE-2007-3652
SQL injection vulnerability in class/page.php in Farsi Script aka FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328...
CVE-2007-3652
FaName 1.0 (FaScript) is affected by a SQL injection vulnerability in the page handling modules (class/page.php / page.php) that allows remote attackers to alter the database via the id parameter. This is documented across multiple sources (NVD, Red Hat CVE, PRION, CVE lists) as CVE-2007-3652, wi...
DEBIAN-CVE-2008-2667
SQL injection vulnerability in the Courier Authentication Library aka courier-authlib before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified...
Sql injection
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 IdFlux parameter to admin/fonctions/supprimerflux.php and the 2 IdTag parameter to admin/fonctions/supprimertag.php...