CVE-2015-4676: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action...

CVE-2014-2008

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

Sql injection

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

CVE-2014-2008

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

CVE-2014-2008: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

PT-2014-4428

Name of the Vulnerable Software and Affected Versions PrestaShop mPAY24 payment module versions prior to 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the TID parameter in the confirm.php file. Recommendations For PrestaShop mPAY24 payme...

Sql injection

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2010-2510

The CVE-2010-2510 entry describes a SQL injection in the 2daybiz Web Template Software, specifically in customize.php where the tid parameter is exploited to execute arbitrary SQL commands. The vulnerability enables remote attackers to interact with the underlying database, as indicated by the de...

CVE-2010-2510: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2009-3754

Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to modules/bms/invoicesdiscountajax.php, 2 f parameter to dbgraphic.php, and 3 tid parameter in a show action to advancedsearch.php...

CVE-2009-2603: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 tid parameters...

CVE-2009-2392

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2009-2392

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2009-2391

CVE-2009-2391 describes a Cross-site Scripting (XSS) vulnerability in Virtuenetz’s Virtue Online Test Generator, specifically in text.php via the tid parameter. The flaw allows remote attackers to inject arbitrary web script or HTML, enabling potential credential or session data theft if the inje...

CVE-2009-2392: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2009-2391: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script or HTML via the tid parameter...

CVE-2008-5952

SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI...

CVE-2008-5952: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI...

Cross site scripting

Cross-site scripting XSS vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web script or HTML via the tid parameter in a team action to modules.php...

CVE-2008-5039: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web script or HTML via the tid parameter in a team action to modules.php...