Sql injection

SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via the user parameter, as reachable from siteadmin/adminlogin.php. NOTE: some of these details are obtained from third party information...

CVE-2008-5054

Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameters to customerlogin.php and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some of these details are...

Sql injection

SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL commands via the manufacturersid parameter...

CVE-2008-5046

SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL commands via the manufacturersid parameter...

CVE-2008-5047

SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-5046

SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL commands via the manufacturersid parameter...

CVE-2008-5037

SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5037

SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5003

SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via uppercase characters in the newsid parameter...

Sql injection

SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands via a crafted cookie...

CVE-2008-5003

SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4991

EC-CUBE (LOCKON CO.,LTD.) contains an SQL injection vulnerability (CVE-2008-4991) affecting EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, 1.5.0-beta2 and earlier, and Community Edition 1.3.5 and earlier. The flaw allows a remote attacker to execute arbitrary SQL commands via a parameter, potentia...

CVE-2008-4991: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in LOCKON CO.,LTD. EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and 1.5.0-beta2 and earlier; and Community Edition 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the parameter...

CVE-2008-4900

SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4902

SQL injection vulnerability in contactauthor.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2008-4897

SQL injection vulnerability in fichiers/addurl.php in Logz podcast CMS 1.3.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the art parameter...

CVE-2008-4895

SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id parameter...