CVE-2010-1583

SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tznmysql.php in Tirzen aka TZN Framework 1.5, as used in TaskFreak! before 0.6.3, allows remote attackers to execute arbitrary SQL commands via the username field in a login action...

CVE-2010-1727

CVE-2010-1727 describes a SQL injection vulnerability in JobPost 1.0’s type.asp, exploitable via the iType parameter. The underlying issue is unsafely constructed SQL queries that incorporate user-supplied input, allowing remote attackers to manipulate the database and potentially execute arbitra...

CVE-2010-1725

SQL injection vulnerability in offersbuy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-1726

SQL injection vulnerability in offersbuy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-1721

SQL injection vulnerability in the Intellectual Property aka IProperty or comiproperty component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties action to index.php...

CVE-2010-1701

SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2010-1713

SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter in a News article modload action...

CVE-2010-1431

SQL injection vulnerability in templatesexport.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the exportitemid parameter...

Sql injection

SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter in a News article modload action...

CVE-2010-1431

SQL injection vulnerability in templatesexport.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the exportitemid parameter...

Sql injection

Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via 1 the login field aka the username parameter, and possibly 2 the password field, to index.php. NOTE: some of these details are obtained from third party...

Sql injection

Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the 1 login field aka agentname parameter or 2 password field aka agentpassword parameter...

Sql injection

SQL injection vulnerability in the Agenda Address Book comagenda component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

Sql injection

SQL injection vulnerability in the Q-Personel comqpersonel component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php...

Sql injection

SQL injection vulnerability in templatesexport.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the exportitemid parameter...

Sql injection

SQL injection vulnerability in castingview.php in Modelbook allows remote attackers to execute arbitrary SQL commands via the adnum parameter...

Sql injection

Multiple SQL injection vulnerabilities in 2daybiz Polls aka Advanced Poll Script allow remote attackers to execute arbitrary SQL commands via 1 the password field to login.php, 2 the login field aka email parameter to login.php, 3 the password field aka pass parameter to the default URI under...

Sql injection

SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2010-1706

Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via 1 the login field aka the username parameter, and possibly 2 the password field, to index.php. NOTE: some of these details are obtained from third party...

CVE-2010-1704

Multiple SQL injection vulnerabilities in 2daybiz Polls aka Advanced Poll Script allow remote attackers to execute arbitrary SQL commands via 1 the password field to login.php, 2 the login field aka email parameter to login.php, 3 the password field aka pass parameter to the default URI under...