9770 matches found
CVE-2010-4997: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...
CVE-2010-5012: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
PT-2011-1947
Name of the Vulnerable Software and Affected Versions DaLogin versions 2.2 through 2.2.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "new.php" file. Recommendations For DaLogin versions 2.2 through 2.2.5, avoid usin...
CVE-2010-4981
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4970
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in articlesdetails.php in BrotherScripts BS Business Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5001
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4979
SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the imageid parameter...
Sql injection
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4981
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4983
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4970
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4974
SQL injection vulnerability in info.php in BrotherScripts BS and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4981
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
PT-2011-1904
Name of the Vulnerable Software and Affected Versions BrotherScripts BS Business Directory affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "articlesdetails.php" file. Recommendations At t...
PT-2011-1936
Name of the Vulnerable Software and Affected Versions esoftpro Online Contact Manager version 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the view.php file. Recommendations For esoftpro Online Contact...
CVE-2010-4969: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in articlesdetails.php in BrotherScripts BS Business Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2011-1905
Name of the Vulnerable Software and Affected Versions Wiki Web Help version 0.28 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "handlers/getpage.php" file. Recommendations For Wiki Web Help version 0.28,...
CVE-2010-5001: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...