15496 matches found
CVE-2010-4961
SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4963
SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...
CVE-2010-4958
SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2010-4957: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Questionnaire kequestionnaire extension before 2.2.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2011-1858
Name of the Vulnerable Software and Affected Versions Virtue Book Store affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bid parameter in the "book/detail.php" endpoint. Recommendations At the moment, there i...
PT-2011-1875
Name of the Vulnerable Software and Affected Versions WAnewsletter version 2.1.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "index.php" file. Recommendations For WAnewsletter version 2.1.2, consider restricting...
PT-2011-1870
Name of the Vulnerable Software and Affected Versions Entrans versions 0.3.2 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sid parameter in the "poll.php" file. Recommendations For Entrans versions 0.3.2 and earlier, avoid...
PT-2011-1887
Name of the Vulnerable Software and Affected Versions TYPO3 extension festat versions prior to 0.2.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 0.2.4, update to version 0.2.4 or later to resolve the issue...
PT-2011-1861
Name of the Vulnerable Software and Affected Versions Joomla! TimeTrack component version 1.2.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ct id parameter in a timetrack action to the "index.php" endpoint. Recommendations Fo...
PT-2011-1889
Name of the Vulnerable Software and Affected Versions xt:Commerce Gambio version 2008 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the products id parameter in the product reviews info.php file. Recommendations For xt:Commerce Gambio versio...
PT-2011-1892
Name of the Vulnerable Software and Affected Versions TYPO3 Questionnaire ke questionnaire extension versions prior to 2.2.3 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.2.3, update to version 2.2.3 or later t...
PT-2011-1898
Name of the Vulnerable Software and Affected Versions Hulihan BXR version 0.6.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the order by parameter in the folder/list functionality. Recommendations For Hulihan BXR version 0.6.8, avoid using...
PT-2011-1880
Name of the Vulnerable Software and Affected Versions Joomla! component com camelcitydb2 version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the "index.php" endpoint. Recommendations For version 2.2 of the...
CVE-2010-4920
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...
CVE-2010-4905
SQL injection vulnerability in articledetails.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbizid parameter...
CVE-2010-4916
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...
CVE-2010-4917
SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter...
CVE-2010-4910
SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...