13559 matches found
CVE-2008-6376
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password pass parameter...
CVE-2008-6383
SQL injection vulnerability in SpeedTech Organization and Resource Manager Storm 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6378
SQL injection vulnerability in calendarEventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2008-6379
SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2008-6376
CVE-2008-6376 is a SQL injection vulnerability in Jbook’s main.asp that allows remote attackers to execute arbitrary SQL commands via the password (pass) parameter. The NVD entry reports a base score of 7.5 (HIGH) with NETWORK attack vector and low complexity, impact to confidentiality, integrity...
Sql injection
SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6352
SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter...
CVE-2008-6365
SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...
CVE-2008-6362
SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...
Sql injection
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...
Sql injection
SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter...
CVE-2008-6358
SQL injection vulnerability in groupindex.php in Social Groupie allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter...
Sql injection
SQL injection vulnerability in surveyresultstext.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6348
Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...
CVE-2008-6366
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...