CVE-2008-6466

SQL injection vulnerability in imagegallery.php in the Akira Powered Image Gallery imagegallery plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action...

CVE-2008-6467

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

Sql injection

SQL injection vulnerability in the Diocese of Portsmouth Church Search pdchurchsearch extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension for TYPO3, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Swigmore institute cgswigmore extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Random Prayer 2 steprayer2 extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6457

SQL injection vulnerability in the Swigmore institute cgswigmore extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6461

SQL injection vulnerability in the Random Prayer 2 steprayer2 extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6464

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6468

SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a browse action...

CVE-2008-6467

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

CVE-2008-6462

SQL injection vulnerability in the My quiz and poll myquizpoll extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-0882

Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to showtheme.php and the 2 user parameter to userinfo.php...

CVE-2009-0883

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...

CVE-2009-0881

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to showtheme.php and the 2 user parameter to userinfo.php...

Sql injection

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...

Sql injection

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0881

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0883

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...

CVE-2009-0882

CVE-2009-0882 corresponds to multiple SQL injection vulnerabilities in nForum 1.5. The affected components are the PHP scripts showtheme.php (id parameter) and userinfo.php (user parameter), with root cause described as insufficient input sanitization in SQL queries. Impact per sources indicates ...