CVE-2010-4861

SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2010-4855

SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makaleid parameter...

CVE-2010-4854

SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action...

CVE-2008-7302

SQL injection vulnerability in netinvoice.php in the nBill comnetinvoice component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving "knowledge of ... the contents of an encrypted file."...

Sql injection

SQL injection vulnerability in netinvoice.php in the nBill comnetinvoice component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving "knowledge of ... the contents of an encrypted file."...

PT-2011-1797

Name of the Vulnerable Software and Affected Versions JExtensions JE Directory com jedirectory component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in an item action to the "index.php"...

CVE-2008-7302: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in netinvoice.php in the nBill comnetinvoice component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving "knowledge of ... the contents of an encrypted file."...

PT-2011-1800

Name of the Vulnerable Software and Affected Versions Joomla! component com jeguestbook version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the d itemid parameter in an item detail action to index.php. Recommendations For...

PT-2011-1792

Name of the Vulnerable Software and Affected Versions CAG CMS version 0.2 Beta Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the itemid parameter in the "click.php" file. Recommendations For CAG CMS version 0.2 Beta, avoid using...

PT-2011-1790

Name of the Vulnerable Software and Affected Versions xWeblog version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the makale id parameter in the oku.asp file. Recommendations For xWeblog version 2.2, consider restricting access to the...

PT-2011-1294

Name of the Vulnerable Software and Affected Versions nBill com netinvoice component version 1.2.0 SP1 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially involving knowledge of the contents of an encrypted file...

PT-2011-1796

Name of the Vulnerable Software and Affected Versions webSPELL version 4.2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the search parameter in the "asearch.php" file. Recommendations For webSPELL version 4.2.1, update to a newer version...

CVE-2011-0553: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2011-2441

Name of the Vulnerable Software and Affected Versions Symantec IM Manager versions prior to 8.4.18 Description A SQL injection issue in the management console allows remote attackers to execute arbitrary SQL commands. Recommendations For Symantec IM Manager versions prior to 8.4.18, update to...

CVE-2011-3688

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...

CVE-2011-3688

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...

CVE-2010-4849

SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the esid parameter...

CVE-2010-4851

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the 1 ref or 2 pollid parameter to index.php, or the 3 country parameter to createaccount.php...

CVE-2010-4844

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

Sql injection

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...