1469 matches found
UBB.threads dosearch.php SQL injection
There is a SQL injection issue in the remote version of UBB.threads that may allow an attacker to execute arbitrary SQL statements on the remote host and potentially overwrite arbitrary files there by sending a malformed value to the 'Name' argument of the file 'dosearch.php'. %NASLMINLEVEL 70300...
CVE-2004-1608
SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation...
CVE-2004-0521
SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abookdatabase.php...
Comersus Cart 5.0 - SQL Injection
Comersus Cart 5.0 - SQL Injection source: https://www.securityfocus.com/bid/10824/info Comersus Cart is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL...
CVE-2004-0732
SQL injection vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to execute arbitrary SQL statements via the instory parameter...
CVE-2004-0521: Undefined Security Weakness
SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abookdatabase.php...
CVE-2004-0366: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements...
CVE-2003-0845
CVE-2003-0845 is addressed by Red Hat/RHEL 5 security updates RHSA-2007:1048 for openoffice.org and hsqldb. The connected advisories state that HSQLDB could allow remote command execution via a port (tcp 9001) when used with OpenOffice.org Base, stemming from two issues: (1) HSQLDB lacking a pass...
