CVE-2008-6209

SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-6204

Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to secure/admin/guncelle.asp, 2 kulad and sifre parameters to secure/admin/giris.asp, and 3 username and password to secure/admin/default.asp...

Sql injection

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-6198

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in sugcat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parentid parameter, a different vector than CVE-2007-4069...

Sql injection

SQL injection vulnerability in the OwnBiblio comownbiblio component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalogue action to index.php...

Sql injection

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to 1 new/index.php, 2 news/index.php, and 3 top/topusers.php, which is not properly handled in database-pgsql.php...

CVE-2008-6188

SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skilledit parameter...

Sql injection

SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skilledit parameter...

CVE-2008-6180

SQL injection vulnerability in system/nlbuser.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie...

Sql injection

SQL injection vulnerability in system/nlbuser.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie...

CVE-2008-6180

SQL injection vulnerability in system/nlbuser.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie...

Sql injection

SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...

Sql injection

SQL injection vulnerability in the KBase comkbase 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php...

CVE-2008-6165

SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...

CVE-2008-6165

SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...

CVE-2008-6189: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to 1 new/index.php, 2 news/index.php, and 3 top/topusers.php, which is not properly handled in database-pgsql.php...

CVE-2008-6165

CVE-2008-6165 refers to an SQL injection vulnerability in the PHP application component named gestion.php of CSPartner 0.1 . The flaw arises when magic_quotes_gpc is disabled , allowing remote attackers to inject arbitrary SQL via the parameters (1) pseudo and (2) passe . Exploitation details are...

CVE-2009-0646

Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 login and 2 password parameters to pcgi/4site.pl, 3 page parameter to print/print.shtml, 4 s and 5 i parameters to portfolio/index.shtml, 6 h parameter to...

CVE-2008-6163

SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter...