Sql injection

SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter aka the Admin field or Username field...

CVE-2008-6794

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a read action...

CVE-2009-1548

SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a read action...

CVE-2009-1548

SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a read action...

CVE-2009-1548

The vulnerability CVE-2009-1548 is a SQL injection in BluSky CMS, targeting index.php via the news_id parameter in a read action, allowing remote attackers to execute arbitrary SQL commands. This is described as a SQL injection vulnerability with high impact (partial confidentiality, integrity, a...

Sql injection

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

Sql injection

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...

CVE-2008-6788

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

CVE-2008-6788

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

Sql injection

SQL injection vulnerability in ajaxpbackend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in the xforumvalidateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookieusername parameter to Configure.php...

CVE-2008-6787

SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user...

CVE-2009-1508

SQL injection vulnerability in the xforumvalidateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookieusername parameter to Configure.php...

CVE-2009-1509

SQL injection vulnerability in ajaxpbackend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2009-1509

SQL injection vulnerability in ajaxpbackend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2009-1508

CVE-2009-1508 affects X-Forum 0.6.2. The vulnerability is an SQL injection in the function xforum_validateUser in Common.php , allowing remote attackers to execute arbitrary SQL commands via the cookie_username parameter to Configure.php. The NVD entry and related records confirm the issue and im...

Sql injection

SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter...

Sql injection

SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words aka keywords field...

Sql injection

Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System DMS allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...