13559 matches found
Sql injection
Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the 1 article parameter to kb.asp, 2 specific parameter to cart.asp, 3 countrycode parameter to contact.asp, and the 4 srch parameter to search.asp. NOTE: the article...
CVE-2010-4636
CVE-2010-4636 is a SQL injection vulnerability in the Site2Nite Business e-Listings product, affecting the detail.asp component. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying a crafted ID parameter, enabling data exposure/modification and potential unaut...
CVE-2010-4639
SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4633
SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1...
CVE-2010-4635
CVE-2010-4635 is a SQL injection vulnerability in Site2Nite Vacation Rental (VRBO) Listings, triggered by the ID parameter in detail.asp. The issue allows remote attackers to execute arbitrary SQL commands. This is documented in the NVD entry and corroborated by multiple sources (e.g., CVE lists ...
CVE-2010-4635
SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental VRBO Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2010-4636
SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2010-4641
SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4619
SQL injection vulnerability in profil.php in Mafya Oyun Scrpti aka Mafia Game Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4612
Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 usremail parameters to user/1/hregister.html, 3 usremail parameter to user/1/hlogin.html, 4 useremail paramete...
CVE-2010-4615
Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 arac parameter to carsdetail.asp and the 2 marka parameter to twohandscars.asp...
CVE-2010-4609
SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser parameter in a registrate action...
Sql injection
Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 arac parameter to carsdetail.asp and the 2 marka parameter to twohandscars.asp...
Sql injection
SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-0723...
Sql injection
SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser parameter in a registrate action...
CVE-2010-4612
Hycus CMS 1.0.3 is affected by CVE-2010-4612: multiple SQL injection in index.php when magic_quotes_gpc is disabled. Vulnerable parameters include user_name and usr_email (hregister.html, hlogin.html), useremail (forgotpass.html), and q (search.html). Root cause is input sanitation flaws allowing...
CVE-2010-4614
CVE-2010-4614 concerns a SQL injection in item.php of Ero Auktion 2010. The vulnerability is triggered through the id parameter, allowing remote attackers to inject arbitrary SQL commands. This is rooted in how item.php handles the id input, enabling manipulation of the underlying database. The l...
CVE-2010-4619
SQL injection vulnerability in profil.php in Mafya Oyun Scrpti aka Mafia Game Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in the JExtensions JE Auto comjeauto component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php...
