13422 matches found
CVE-2010-5000
SQL injection vulnerability in login/loginindex.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the myusername parameter aka Username field in a dologin action. NOTE: some of these details are obtained from third party information...
CVE-2010-5034
SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands via the planid parameter...
CVE-2010-5004
SQL injection vulnerability in searchvote.php in 2daybiz Polls aka Advanced Poll Script allows remote attackers to execute arbitrary SQL commands via the category parameter...
CVE-2010-5043
SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...
CVE-2010-5024
SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4997
CVE-2010-4997 affects OlyKit Swoopo Clone 2010, specifically the index.php product action handling. The vulnerability is an SQL injection via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Multiple reputable sources (NVD entry, Red Hat advisory, PRION/NVD mirrors) ...
CVE-2010-5037
SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
CVE-2010-5033
SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL commands via the CatDisplay parameter...
CVE-2010-5013
SQL injection vulnerability in listingdetail.asp in Mckenzie Creations Virtual Real Estate Manager VRM 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter...
CVE-2010-5036
SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter...
CVE-2010-5015: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in viewphoto.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter...
PT-2011-1950
Name of the Vulnerable Software and Affected Versions 2daybiz Network Community Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the alb parameter in the view photo.php file. Recommendations At the moment,...
PT-2011-1954
Name of the Vulnerable Software and Affected Versions 2daybiz Online Classified Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the alb parameter in the view photo.php file. Recommendations At the moment,...
PT-2011-1971
Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the type parameter in the "addsale.php" file. Recommendations For iScripts eSwap version 2.0, consider restricting...
PT-2011-1959
Name of the Vulnerable Software and Affected Versions CuteSITE CMS versions 1.2.3 through 1.5.0 Description The issue allows remote authenticated users with Read privileges to execute arbitrary SQL commands. This is achieved via the user id parameter in the "manage/add user.php" endpoint...
CVE-2010-5013: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in listingdetail.asp in Mckenzie Creations Virtual Real Estate Manager VRM 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter...
CVE-2010-5044: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in models/log.php in the Search Log comsearchlog component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL commands via the search parameter in a log action to administrator/index.php. NOTE: some of these...
CVE-2010-4984
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box...