CVE-2010-1343: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

Sql injection

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2010-1301

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2010-1300

The CVE-2010-1300 entry documents a SQL injection in Yamamah (aka Dove Photo Album) 1.00, exploitable via the calbums parameter in index.php. The underlying issue is improper handling of user-supplied input, allowing an attacker to inject arbitrary SQL commands. Impact as described aligns with pa...

CVE-2010-1301

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2010-1301

Centreon 2.1.5 contains an SQL injection in main.php exploited via the host_id parameter. The OpenVAS entries confirm Centreon is prone to SQLi due to insufficient input sanitization, enabling remote attackers to execute arbitrary SQL commands and potentially compromise data. The affected compone...

CVE-2010-0400

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...

Sql injection

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...

CVE-2010-0400

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...

CVE-2010-0400: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...

Sql injection

SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter...

CVE-2010-1271

SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter...

Sql injection

SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the idauk parameter...

CVE-2010-1265

SQL injection vulnerability in Adam Corley dcsFlashGames comdcsflashgames allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Sql injection

SQL injection vulnerability in Adam Corley dcsFlashGames comdcsflashgames allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2010-1270

SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the idauk parameter...

CVE-2010-1265: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Adam Corley dcsFlashGames comdcsflashgames allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Cross-site request forgery (CSRF) in e107

High-Tech Bridge SA Security Research Lab has discovered two CSRF vulnerabilities in e107 which could allow a remote attacker to execute arbitrary SQL commands in applications database and gain complete control over the application. 1 Cross-site request forgery in e107 1.1 The vulnerability is...

Joomla! Component JP Jobs 1.4.1 - SQL Injection

Joomla! Component JP Jobs 1.4.1 - SQL Injection :: General information :: Joomla component jpjobs SQL Injection vulnerability :: by Valentin Hoebel :: [email protected] :: Product information :: Name = jpjobs :: Vendor = Joomla! Projects :: Vendor Website = http://www.joomlanetprojects.com/ ::...

Sql injection

SQL injection vulnerability in the find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable...