Sql injection

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation aka Affiliates module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the 1 in or 2 out parameter...

Sql injection

SQL injection vulnerability in include/getread.php in Extensible-BioLawCom CMS X-BLC 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2009-2310

SQL injection vulnerability in include/getread.php in Extensible-BioLawCom CMS X-BLC 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2009-2309

SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via the tag parameter...

CVE-2009-2269

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

Sql injection

SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the out parameter...

Sql injection

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

Sql injection

SQL injection vulnerability in the Boy Scout Advancement combsadv component 0.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a 1 account or 2 event task to index.php...

CVE-2009-2290

SQL injection vulnerability in the Boy Scout Advancement combsadv component 0.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a 1 account or 2 event task to index.php...

CVE-2009-2269

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

Sql injection

Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the querystring parameter in an execute action, in conjunction with a PATHINFO of passwordforgotten.php, related to a "SQL...

CVE-2009-2242

SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2009-2243

SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2009-2235

SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different issue than CVE-2008-3258. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the 1 Username parameter $PHPAUTHUSER and 2 Password parameter $PHPAUTHPW...

Sql injection

SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrary SQL commands via the txtAdminEmail parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-2234

CVE-2009-2234 affects VICIdial Call Center Suite (example: 2.0.5-173) with multiple SQL injection vulnerabilities in admin.php. The root cause is unsafe handling of user-supplied input in the PHP_AUTH_USER and PHP_AUTH_PW parameters, allowing remote attackers to execute arbitrary SQL commands. Do...