Sql injection

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...

CVE-2009-2599

SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL commands via the seller parameter in a search action...

CVE-2009-2601

SQL injection vulnerability in the Joomlaequipment aka JUser or comjuser component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showprofile action to index.php...

CVE-2009-2598

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...

CVE-2009-2603

Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 tid parameters...

CVE-2009-2603

CVE-2009-2603 : The content shows concrete details: Escon SupportPortal Pro 3.0 contains multiple SQL injection flaws in index.php, exploitable via the (1) cat and (2) tid parameters. Remote attackers could execute arbitrary SQL commands. Impact is partial confidentiality, integrity, and availabi...

CVE-2009-2608: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to delete.php or 2 alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565...

CVE-2009-2603: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 tid parameters...

Basilic 1.5.13 - index.php Cross-Site Scripting

Basilic 1.5.13 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43372/info Basilic is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

CVE-2009-2599: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL commands via the seller parameter in a search action...

CVE-2009-2609: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the amoCourse comamocourse component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php...

CVE-2009-2589

Multiple cross-site scripting XSS vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 feedback.php, 2 index.php, and 3 lostpassword.php...

Basilic 1.5.13 - index.php?idAuthor SQL Injection

Basilic 1.5.13 - index.php?idAuthor SQL Injection ================================================================================================== o Basilic 1.5.13 SQL Injection Vulnerability Software : Basilic version 1.5.13 Vendor : http://artis.imag.fr/Software/Basilic/ Download :...

Basilic 1.5.13 SQL Injection

================================================================================================== o Basilic 1.5.13 SQL Injection Vulnerability Software : Basilic version 1.5.13 Vendor : http://artis.imag.fr/Software/Basilic/ Download : http://artis.imag.fr/Software/Basilic/basilic-1.5.14.tar.gz...

CVE-2009-2591: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewannonces action to index.php...

CVE-2009-2588: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 feedback.php, 2 index.php, and 3 lostpassword.php...

CVE-2009-2585: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a member cookie in an account editprofile action, a different vector than CVE-2009-1731...

Basilic 1.5.13 (index.php idAuthor) SQL Injection Vulnerability

No description provided by source. ================================================================================================== o Basilic 1.5.13 SQL Injection Vulnerability Software : Basilic version 1.5.13 Vendor : http://artis.imag.fr/Software/Basilic/ Download :...

Basilic 1.5.13 (index.php idAuthor) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Basilic 1.5.13 index.php idAuthor SQL Injection Vulnerability ===============================================================...

Basilic 1.5.13 - 'index.php?idAuthor' SQL Injection

================================================================================================== o Basilic 1.5.13 SQL Injection Vulnerability Software : Basilic version 1.5.13 Vendor : http://artis.imag.fr/Software/Basilic/ Download : http://artis.imag.fr/Software/Basilic/basilic-1.5.14.tar.gz...