Sql injection

Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the quid parameter to bugs.aspx, 2 the rowid parameter to deletequery.aspx, the 3 newproject or 4 usid parameter to editbug.aspx, or 5 the buglist paramet...

CVE-2010-3267

Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the quid parameter to bugs.aspx, 2 the rowid parameter to deletequery.aspx, the 3 newproject or 4 usid parameter to editbug.aspx, or 5 the buglist paramet...

CVE-2010-4357

SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter...

CVE-2010-4362

Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the 1 selStock parameter to search.asp and the 2 orderBy parameter to showAlllistings.asp...

Sql injection

SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter...

Sql injection

SQL injection vulnerability in JE Ajax Event Calendar comjeajaxeventcalendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an alleventlistmore action to index.php...

Sql injection

SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the 1 selStock parameter to search.asp and the 2 orderBy parameter to showAlllistings.asp...

Sql injection

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 email parameters in a showtickets action...

CVE-2010-4356

CVE-2010-4356 affects Site2Nite Big Truck Broker: SQL injection in news_default.asp via the txtSiteId parameter, enabling remote arbitrary SQL execution. Root cause: input from txtSiteId is not properly validated, allowing crafted queries. Affected component: news_default.asp; software: Site2Nite...

CVE-2010-4356

SQL injection vulnerability in newsdefault.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitrary SQL commands via the txtSiteId parameter...

CVE-2010-4357

SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter...

CVE-2008-7267

SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2010-5436

Name of the Vulnerable Software and Affected Versions Jurpopage version 0.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the category parameter in the "index.php" file. Recommendations For Jurpopage version 0.2.0, update to a newer versio...

PT-2010-5437

Name of the Vulnerable Software and Affected Versions Jurpopage version 0.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the note and pg parameters in the "index.php" file. Recommendations For Jurpopage version 0.2.0, consider restricting...

PT-2010-5434

Name of the Vulnerable Software and Affected Versions SiteEngine version 7.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the module parameter in comments.php. Recommendations For SiteEngine version 7.1, avoid using the module parameter in...

PT-2010-1256

Name of the Vulnerable Software and Affected Versions SiteEngine versions 5.x Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the announcements.php file. Recommendations For SiteEngine versions 5.x, avoid using the id parameter in the...

CVE-2010-4298

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

Sql injection

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...

CVE-2010-4298

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...