Sql injection

SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter...

Sql injection

SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4870

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

CVE-2010-4876

SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter...

CVE-2010-4888

SQL injection vulnerability in the Tiny Market hmtinymarket extension 0.5.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4872

SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter...

PT-2011-1826

Name of the Vulnerable Software and Affected Versions TYPO3 ke yac extension versions prior to 1.1.2 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.1.2, update to version 1.1.2 or later to resolve the issue...

CVE-2010-4888: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Tiny Market hmtinymarket extension 0.5.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4872: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter...

CVE-2010-4887: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Commenting system Backend Module commentsbe extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2011-1823

Name of the Vulnerable Software and Affected Versions TYPO3 extension hm tinymarket versions 0.5.4 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 0.5.4 and earlier, at the moment, there is no information about ...

PT-2011-1811

Name of the Vulnerable Software and Affected Versions mBlogger version 1.0.04 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the postID parameter in the "viewpost.php" file. Recommendations For mBlogger version 1.0.04, consider restricting...

PT-2011-1805

Name of the Vulnerable Software and Affected Versions BloofoxCMS version 0.3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the gender parameter in the "index.php" endpoint. Recommendations For BloofoxCMS version 0.3.5, consider restricting...

CVE-2010-4866

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...

CVE-2010-4856

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

CVE-2010-4860

SQL injection vulnerability in productdesc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4857

SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2010-4859

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blogid parameter in a news action...

CVE-2010-4864

SQL injection vulnerability in the Club Manager comclubmanager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cmid parameter in an equip presenta action to index.php...

Sql injection

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...