13559 matches found
CVE-2008-3417
SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561...
CVE-2008-3413
The CVE-2008-3413 entry concerns a SQL injection vulnerability in category.php of Greatclone GC Auction Platinum, exploitable via the cate_id parameter to allow remote attackers to execute arbitrary SQL commands. Public references corroborate the vulnerability and its classification as SQL inject...
CVE-2008-3406
SQL injection vulnerability in showcat.php in phpLinkat 0.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the eventsid parameter...
Sql injection
SQL injection vulnerability in mojoClassified.cgi in MojoPersonals allows remote attackers to execute arbitrary SQL commands via the cat parameter...
Sql injection
SQL injection vulnerability in showcat.php in phpLinkat 0.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-3406
The CVE-2008-3406 entry describes a SQL injection vulnerability in showcat.php of phpLinkat 0.1, where the catid parameter can be exploited to execute arbitrary SQL commands remotely. The connected documents corroborate the vulnerability class (SQL injection) and the affected component (phpLinkat...
Sql injection
SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the dbtable parameter...
CVE-2008-3388
Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via the article parameter to 1 comaddok.php and 2 comlook.php...
Sql injection
SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via the cata parameter in a browse action...
Sql injection
Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via the article parameter to 1 comaddok.php and 2 comlook.php...
Sql injection
SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086...
CVE-2008-3382
CVE-2008-3382 affects MojoClassifieds 2.0, specifically the mojoClassified.cgi component, where the cat_a parameter enables SQL injection. The root cause is an unsafely handled input path in mojoClassified.cgi that allows remote execution of arbitrary SQL commands. Documented impact is that remot...
Sql injection
SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access CUA 4.04735.p4 allows remote attackers to execute arbitrary SQL commands via the user user name field...
Sql injection
SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the imageid parameter...
CVE-2008-3366
SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774...
Sql injection
SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774...
Sql injection
SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the rsargs array parameter in an expgetFeedContent action...