13315 matches found
CVE-2008-2532
SQL injection vulnerability in forum/topicdetail.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2535
Phoenix View CMS (Pre Alpha2 and earlier) contains multiple SQL injection vulnerabilities in the admin module. The issue arises via the del parameter in five files: gbuch.admin.php, links.admin.php, menue.admin.php, news.admin.php, and todo.admin.php, allowing remote attackers to execute arbitrar...
Sql injection
SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter...
Sql injection
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 album parameter to thumbnails.php and the 2 pid parameter to displayimage.php...
CVE-2008-2501
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 album parameter to thumbnails.php and the 2 pid parameter to displayimage.php...
Sql injection
SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the fid parameter...
Sql injection
Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary SQL commands via the 1 mainid and 2 id parameters to index2.php...
Sql injection
Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to netbutik.php and the 2 id parameter to product.php...
CVE-2008-2509
SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter...
CVE-2008-2509
SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter...
Sql injection
Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 kind parameter to fix/browse.php and the 2 account parameter to auth/00pass.php...
Sql injection
Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 articleid and 2 mcname parameters. NOTE: some of these details are obtained from third party information...
Sql injection
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to post3/view.asp and the 2 review parameter to post3/book.asp...
CVE-2008-2477
SQL injection vulnerability in index.php in MxBB aka MX-System Portal 2.7.3 allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-2491
SQL injection vulnerability in advcat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the email parameter...
Sql injection
SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...
Sql injection
SQL injection vulnerability in index.php in MxBB aka MX-System Portal 2.7.3 allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-2492
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to post3/view.asp and the 2 review parameter to post3/book.asp...