PT-2011-1811

Name of the Vulnerable Software and Affected Versions mBlogger version 1.0.04 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the postID parameter in the "viewpost.php" file. Recommendations For mBlogger version 1.0.04, consider restricting...

CVE-2010-4888: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Tiny Market hmtinymarket extension 0.5.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4872: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter...

CVE-2010-4887: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Commenting system Backend Module commentsbe extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4866

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...

CVE-2010-4856

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

CVE-2010-4857

SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2010-4859

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blogid parameter in a news action...

CVE-2010-4864

SQL injection vulnerability in the Club Manager comclubmanager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cmid parameter in an equip presenta action to index.php...

CVE-2010-4860

SQL injection vulnerability in productdesc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in the ccInvoices comccinvoices component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php...

Sql injection

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blogid parameter in a news action...

Sql injection

SQL injection vulnerability in the JExtensions JE Directory comjedirectory component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...

Sql injection

SQL injection vulnerability in the JE Guestbook comjeguestbook component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ditemid parameter in an itemdetail action to index.php...

Sql injection

SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makaleid parameter...

Sql injection

SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...

Sql injection

SQL injection vulnerability in productdesc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

Sql injection

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...

Sql injection

SQL injection vulnerability in the Club Manager comclubmanager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cmid parameter in an equip presenta action to index.php...