15496 matches found
CVE-2010-4917
SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter...
CVE-2010-4920
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...
CVE-2010-4911
SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...
CVE-2010-4921
SQL injection vulnerability in incpollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQL commands via the QuestionID parameter in a results action...
CVE-2010-4912
SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid parameter in a view action...
PT-2011-1832
Name of the Vulnerable Software and Affected Versions BlueCMS version 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the X-Forwarded-For HTTP header in a send action to the comment.php file. Recommendations For BlueCMS version 1.6, consid...
PT-2011-1846
Name of the Vulnerable Software and Affected Versions PHP Classifieds Ads affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sid parameter in the "classi/detail.php" file. Recommendations At the moment, there i...
PT-2011-1845
Name of the Vulnerable Software and Affected Versions ColdGen ColdCalendar version 2.06 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the EventID parameter in a "ViewEventDetails" action on the index.cfm file. Recommendations For ColdGen...
PT-2011-1834
Name of the Vulnerable Software and Affected Versions CMS WebManager-Pro versions prior to 8.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the c.php file. Recommendations For versions prior to 8.1, update to version 8.1...
PT-2011-1837
Name of the Vulnerable Software and Affected Versions Joomla! component Clantools com clantools version 1.2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the squad or showgame parameter to the "index.php" endpoint. Recommendations For...
PT-2011-1841
Name of the Vulnerable Software and Affected Versions Zenphoto versions 1.3 through 1.3.1.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the a parameter in the full-image.php file within the zp-core component. Recommendations For Zenphoto...
PT-2011-1854
Name of the Vulnerable Software and Affected Versions Micronetsoft RV Dealer Website version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the vehicletypeID parameter in the "detail.asp" endpoint. Recommendations For Micronetsoft RV Deal...
PT-2011-1851
Name of the Vulnerable Software and Affected Versions ColdGen ColdUserGroup version 1.06 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ArticleID or LibraryID parameter in the "index.cfm" file. Recommendations For ColdGen ColdUserGroup...
PT-2011-1847
Name of the Vulnerable Software and Affected Versions UCenter Home version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the shopid parameter in a "view" action, specifically targeting the shop.php file. Recommendations For UCenter Home...
PT-2011-1850
Name of the Vulnerable Software and Affected Versions ColdGen ColdBookmarks version 1.22 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the BookmarkID parameter in an "EditBookmark" action in the index.cfm file. Recommendations For ColdGen...
CVE-2010-4891
SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4872
SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter...
CVE-2010-4876
SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter...
