9769 matches found
CVE-2010-2905: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts BS Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-2851: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the BookLibrary From Same Author combooklibrary module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...
CVE-2010-2847: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the InterJoomla ArtForms comartforms component 2.1b7.2 RC2 for Joomla! allow remote attackers to execute arbitrary SQL commands via the viewform parameter in a 1 ferforms or 2 tferforms action to index.php, and the 3 id parameter in a vferforms action to...
CVE-2009-4936: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Small Pirate SPirate 2.1 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to the default URI in an rss .xml action, or the id parameter to 2 pag1.php, 3 pag1-guest.php, 4 rss-commentpost.php aka rss-comentpost.php, or 5...
Sql injection
SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-2716: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 ndetail.php and 2 print.php...
CVE-2010-2719: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-2720: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-2687
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter...
Sql injection
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter...
Sql injection
SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-2684
SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-2688
CVE-2010-2688 refers to a SQL injection in Site2Nite Boat Classifieds, specifically in detail.asp, exploitable via the ID parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, with impacts described as partial confidentiality/integrity/availability. The OpenVAS e...
CVE-2010-2687
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter...
CVE-2010-2688: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2009-4926: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Online Contact Manager formerly EContact PRO 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showGroup parameter to a index.php and the 2 id parameter to b view.php, c email.php, d edit.php, and e delete.php...
CVE-2010-2684: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-2690: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the JOOFORGE Gamesbox comgamesbox component 1.0.2, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a consoles action to index.php...
CVE-2010-2687: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter...