CVE-2006-2748: Undefined Security Weakness

SQL injection vulnerability in the domysqlquery function in core.php for Open Searchable Image Catalogue OSIC before 0.7.0.1 allows remote attackers to inject arbitrary SQL commands via multiple vectors, as demonstrated by the 1 type parameter in adminfunctions.php and the 2 catalogueid parameter...

CVE-2006-2103

SQL injection vulnerability in MyBB MyBulletinBoard 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the 1 query string $querystring variable in a admin/adminlogs.php, which is not properly handled by adminfunctions.php; or 2 setid, 3 expand, 4 title, or 5 si...

MyBB1.1.1.txt

MyBB Local SQL Injections .. This Local Injections Only For Admin 1 code adminfunctions.php , line 730 $db-query"INSERT INTO ".TABLEPREFIX."adminlog uid,dateline,scriptname,action,querystring,ipaddress VALUES...