Sql injection

SQL injection vulnerability in hotelhabitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allows remote attackers to execute arbitrary SQL commands via the HotelID parameter...

Sql injection

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2008-6809

SQL injection vulnerability in hotelhabitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allows remote attackers to execute arbitrary SQL commands via the HotelID parameter...

CVE-2008-6810

CVE-2008-6810 affects Venalsur Booking Centre Booking System for Hotels Group 2.01. The vulnerability is multiple SQL injection in admin/checklogin.php, exploitable via the myusername (username) and password parameters, enabling remote SQL command execution as reported. The issue is documented wi...

CVE-2009-1661

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2009-1661

CVE-2009-1661 affects uTopic 1.0: an SQL injection in the admin/utopic.php path when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject SQL via the rating parameter to index.php, enabling arbitrary commands as described in the NVD entry. Connected documents corrobor...

CVE-2009-1657: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-1651

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

Sql injection

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

Sql injection

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

Sql injection

Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the 1 user name userid parameter and 2 password...

CVE-2009-1651

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

Sql injection

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the ordersn parameter in an orderquery action...

Sql injection

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-6808

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2009-1626

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-6808

CVE-2008-6808 describes a SQL injection vulnerability in the Links.php component of Scripts for Sites (SFS) EZ Link Directory. The flaw allows remote attackers to manipulate the underlying SQL query via the cat_id parameter in the list action, potentially enabling arbitrary SQL execution. Connect...