Sql injection

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter...

CVE-2009-0445: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL commands via the exhibitionid parameter in a gallery.viewPhotos action...

CVE-2008-6064: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...

CVE-2009-0425: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter...

CVE-2009-0423: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Php Photo Album PHPPA 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. dot dot in the preview parameter...

CVE-2009-0420: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the RD-Autos comrdautos 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2009-0425

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter...

CVE-2008-6050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Tech Articles comtecharticle 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the item parameter to index.php...

CVE-2009-0406

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...

CVE-2008-6038

SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...

CVE-2008-6040

Arcadem Pro is affected by a SQL injection in index.php (versions 2.700–2.802). The vulnerability allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, likely due to a flaw in includes/articleblock.php. No remediation or exploit details are provided in the connec...

CVE-2008-6042

SQL injection vulnerability in the research module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php...

CVE-2008-6027: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 whl, 2 var1, and 3 search parameters...

CVE-2008-6038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...

CVE-2008-6040: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php...

CVE-2008-6042: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the research module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php...

CVE-2008-6030: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in NetArtMedia Jobs Portal 1.3 allow remote attackers to execute arbitrary SQL commands via 1 the job parameter to index.php in the search module or 2 the newsid parameter to index.php...

CVE-2009-0406: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6019

CVE-2008-6019 describes a SQL injection in the Web app EACOMM DO-CMS 3.0. The vulnerability is in index.php, exploitable via the p parameter to remotely execute arbitrary SQL commands. The documents do not provide remediation, affected versions beyond 3.0, or exploit details. No further public te...