9769 matches found
CVE-2011-4571: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Estate Agent comestateagent component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showEO action to index.php...
CVE-2010-5047
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5055
SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5055: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2011-1982
Name of the Vulnerable Software and Affected Versions V-EVA Press Release Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the page.php file. This can be exploited by sending malicious input to the API...
PT-2011-1995
Name of the Vulnerable Software and Affected Versions NUs Newssystem version 1.02 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the Nus.php file. Recommendations For version 1.02, avoid using the id parameter in the...
CVE-2010-5060: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2011-1990
Name of the Vulnerable Software and Affected Versions Almnzm version 2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "index.php" endpoint. Recommendations For Almnzm version 2.1, avoid using the id parameter in the...
CVE-2010-5047: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5024
SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-5008
SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...
Sql injection
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...
CVE-2010-5041
SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...
CVE-2010-5014: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQL commands via the ladderid parameter...
PT-2011-1976
Name of the Vulnerable Software and Affected Versions NP Gallery plugin version 0.94 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a plugin action within the index.php file of the NP Gallery plugin...
PT-2011-1932
Name of the Vulnerable Software and Affected Versions OlyKit Swoopo Clone 2010 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a product action within the index.php file. Recommendations For OlyKit Swoopo Clone...
CVE-2010-5041: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...
CVE-2010-4997: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...