PT-2011-1967

Name of the Vulnerable Software and Affected Versions Joomla! component com bfquiztrial versions prior to 1.3.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the catid parameter in a bfquiztrial action to "index.php". Recommendations For...

PT-2011-1971

Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the type parameter in the "addsale.php" file. Recommendations For iScripts eSwap version 2.0, consider restricting...

CVE-2010-5044: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in models/log.php in the Search Log comsearchlog component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL commands via the search parameter in a log action to administrator/index.php. NOTE: some of these...

PT-2011-1949

Name of the Vulnerable Software and Affected Versions Elite Gaming Ladders version 3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ladderid parameter in the standings.php file. Recommendations For Elite Gaming Ladders version 3.5, avoi...

PT-2011-1950

Name of the Vulnerable Software and Affected Versions 2daybiz Network Community Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the alb parameter in the view photo.php file. Recommendations At the moment,...

PT-2011-1956

Name of the Vulnerable Software and Affected Versions Digital Interchange Document Library version 5.8.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the intGroupID parameter in the "view group.asp" file. Recommendations For Digital...

PT-2011-1961

Name of the Vulnerable Software and Affected Versions Science Fair In A Box SFIAB versions 2.0.6 through 2.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the type parameter in the winners.php file. Recommendations For versions 2.0.6 throu...

PT-2011-1976

Name of the Vulnerable Software and Affected Versions NP Gallery plugin version 0.94 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a plugin action within the index.php file of the NP Gallery plugin...

PT-2011-1946

Name of the Vulnerable Software and Affected Versions SchoolMation version 2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the session parameter in the /html/studentmain.php endpoint. Recommendations For SchoolMation version 2.3, consider...

PT-2011-1979

Name of the Vulnerable Software and Affected Versions Joomla! component com searchlog version 3.1.0 Description The issue allows remote authenticated users with Public Back-end privileges to execute arbitrary SQL commands. This is achieved by exploiting the search parameter in a log action to the...

PT-2011-1954

Name of the Vulnerable Software and Affected Versions 2daybiz Online Classified Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the alb parameter in the view photo.php file. Recommendations At the moment,...

PT-2011-1978

Name of the Vulnerable Software and Affected Versions DJ-ArtGallery com djartgallery version 0.9.1 for Joomla! Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the cid parameter in an editItem action to...

PT-2011-1944

Name of the Vulnerable Software and Affected Versions UTStats versions Beta 4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the pid parameter in a "matchp" action in the index.php file. Recommendations For versions Beta 4 and...

CVE-2010-5015: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewphoto.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter...

PT-2011-1952

Name of the Vulnerable Software and Affected Versions Elite Gaming Ladders version 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the account parameter in the stats.php file. Recommendations For Elite Gaming Ladders version 3.0, consider...

CVE-2010-5013: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in listingdetail.asp in Mckenzie Creations Virtual Real Estate Manager VRM 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter...

PT-2011-1948

Name of the Vulnerable Software and Affected Versions Mckenzie Creations Virtual Real Estate Manager VRM version 3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Lid parameter in the listing detail.asp file. Recommendations Fo...

CVE-2010-4982

SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...

CVE-2010-4983

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4984

SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box...