9763 matches found
CVE-2008-4709: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in newsread.php in Pilot Group PG eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4705: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in successstory.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...
CVE-2008-4653
SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-4665: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...
CVE-2008-4653: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-4642: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...
CVE-2008-4617: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 dish.php and 2 menu.php...
CVE-2008-4605: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 dish.php and 2 menu.php...
Sql injection
SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4528: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager pPIM 1.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter in an edit action...
CVE-2008-4517: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4488
Cross-site scripting XSS vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name and 2 id parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4494: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4468
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in showseriesink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4468: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...