13422 matches found
Sql injection
SQL injection vulnerability in the Event event extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4936
SQL injection vulnerability in the Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
CVE-2010-4935
SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter...
CVE-2010-4958
SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2010-4933
CVE-2010-4933: A SQL injection in Geeklog 1.3.8 affects filemgmt/singlefile.php via the lid parameter, allowing remote SQL execution. Affected software/version: Geeklog 1.3.8 (Geeklog core, filemgmt module). Root cause: improper handling of lid leading to arbitrary SQL execution. Impact per sourc...
CVE-2010-4963
SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...
CVE-2010-4961
SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4940
SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4946
CVE-2010-4946 describes an SQL injection in ALLPC 2.5, specifically in product_info.php where the products_id parameter can be manipulated to run arbitrary SQL. The vulnerability, as documented by NVD and Red Hat, carries a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexi...
CVE-2010-4922
Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to 1 contentAE.asp or 2 templatesAE.asp...
CVE-2010-4954
SQL injection vulnerability in productreviewsinfo.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the productsid parameter...
CVE-2010-4941
SQL injection vulnerability in the Teams comteams component 110281008091711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php...
PT-2011-1861
Name of the Vulnerable Software and Affected Versions Joomla! TimeTrack component version 1.2.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ct id parameter in a timetrack action to the "index.php" endpoint. Recommendations Fo...
PT-2011-1887
Name of the Vulnerable Software and Affected Versions TYPO3 extension festat versions prior to 0.2.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 0.2.4, update to version 0.2.4 or later to resolve the issue...
PT-2011-1892
Name of the Vulnerable Software and Affected Versions TYPO3 Questionnaire ke questionnaire extension versions prior to 2.2.3 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.2.3, update to version 2.2.3 or later t...
PT-2011-1870
Name of the Vulnerable Software and Affected Versions Entrans versions 0.3.2 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sid parameter in the "poll.php" file. Recommendations For Entrans versions 0.3.2 and earlier, avoid...
PT-2011-1858
Name of the Vulnerable Software and Affected Versions Virtue Book Store affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bid parameter in the "book/detail.php" endpoint. Recommendations At the moment, there i...
PT-2011-1880
Name of the Vulnerable Software and Affected Versions Joomla! component com camelcitydb2 version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the "index.php" endpoint. Recommendations For version 2.2 of the...
CVE-2010-4957: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Questionnaire kequestionnaire extension before 2.2.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
