15496 matches found
CVE-2010-4981
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4970
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4980
Summary of CVE-2010-4980 : This vulnerability affects iScripts ReserveLogic (versions 1.0 and 1.1) where the vulnerable input is the pid parameter in packagedetails.php (and/or id parameter in ReserveLogic variants). The underlying issue is SQL injection, allowing remote attackers to execute arbi...
CVE-2010-4989
SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...
CVE-2010-4980
SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2011-1915
SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in lib/oozaccess.php in OneOrZero Action & Information Management System AIMS 2.7.0 allows remote attackers to execute arbitrary SQL commands via the cookieName variable...
PT-2011-1904
Name of the Vulnerable Software and Affected Versions BrotherScripts BS Business Directory affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "articlesdetails.php" file. Recommendations At t...
PT-2011-1919
Name of the Vulnerable Software and Affected Versions My Kazaam Notes Management System affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through vectors involving the "Enter Reference Number Below" text box in...
CVE-2010-4982: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...
CVE-2010-4981: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2011-1915: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2011-1936
Name of the Vulnerable Software and Affected Versions esoftpro Online Contact Manager version 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the view.php file. Recommendations For esoftpro Online Contact...
PT-2011-1928
Name of the Vulnerable Software and Affected Versions Joomla! component eventcal com eventcal version 1.6.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in the "index.php" endpoint. Recommendations For version...
PT-2011-1926
Name of the Vulnerable Software and Affected Versions Joomla! component com ninjamonials affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in a "display" action to "index.php"...
PT-2011-1929
Name of the Vulnerable Software and Affected Versions Joomla! Jobs Pro component version 1.6.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the detailed results parameter to the "search jobs.html" endpoint. Recommendations For version 1.6.4...
PT-2011-3473
Name of the Vulnerable Software and Affected Versions Enspire Distribution Management Solution version 7.3.2.7 eClient version 7.3.2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Enspire Distribution Management Solution version 7.3.2.7,...
PT-2011-1910
Name of the Vulnerable Software and Affected Versions Joomla! component Techjoomla SocialAds For JomSocial com socialads affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to "index.php"...
PT-2011-1931
Name of the Vulnerable Software and Affected Versions esoftpro Online Guestbook Pro version 5.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the search parameter in the ogp show.php file. Recommendations For esoftpro Online Guestbook Pro...