Debian DSA-2138-1 : wordpress - SQL injection

Vladimir Kolesnikov discovered a SQL injection vulnerability in WordPress, a weblog manager. An authenticated user could execute arbitrary SQL commands via the Send Trackbacks field. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2010-4641

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4635

SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental VRBO Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4636

SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4632

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the 1 article parameter to kb.asp, 2 specific parameter to cart.asp, 3 countrycode parameter to contact.asp, and the 4 srch parameter to search.asp. NOTE: the article...

CVE-2010-4633

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1...

Sql injection

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the 1 article parameter to kb.asp, 2 specific parameter to cart.asp, 3 countrycode parameter to contact.asp, and the 4 srch parameter to search.asp. NOTE: the article...

Sql injection

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1...

Sql injection

SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s comjquarks4s component 1.0.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the q parameter in a submitSurvey action to index.php...

Sql injection

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4635

SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental VRBO Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4635

CVE-2010-4635 is a SQL injection vulnerability in Site2Nite Vacation Rental (VRBO) Listings, triggered by the ID parameter in detail.asp. The issue allows remote attackers to execute arbitrary SQL commands. This is documented in the NVD entry and corroborated by multiple sources (e.g., CVE lists ...

CVE-2010-4636

SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4633

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1...

CVE-2010-4641

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4636

CVE-2010-4636 is a SQL injection vulnerability in the Site2Nite Business e-Listings product, affecting the detail.asp component. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying a crafted ID parameter, enabling data exposure/modification and potential unaut...

CVE-2010-4639

SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2010-5596

Name of the Vulnerable Software and Affected Versions ASPilot Pilot Cart version 7.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the article parameter to "kb.asp", a specific parameter to "cart.asp", the...

CVE-2010-4641: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...