CVE-2008-6227: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in buyerdetail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the 1 sid and 2 cid parameters...

Sql injection

SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0428

SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0427: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0426: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Classified Listings Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0428: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0401

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0401

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0401: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0381: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart comprod 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php...

CVE-2008-6016

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6016

Affected product/version: EsFaq 2.0. Vulnerability: SQL injection in questions.php (two related vectors observed: via cid parameter for CVE-2008-6016 and via idcat parameter for CVE-2008-3952). Root cause (per sources): Unparameterized SQL handling in the backend allows remote attackers to inject...

CVE-2008-6016: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-5960

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2008-5961

CVE-2008-5961 is a cross-site scripting (XSS) vulnerability in Tribiq CMS Community versions 5.0.10B and 5.0.11E, exploitable via the cID parameter in a document action on index.php. The issue arises from inadequate input handling that allows an attacker to inject arbitrary script/HTML. Reported ...

CVE-2008-5960: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...