CVE-2008-4531

CVE-2008-4531 covers a SQL injection in Brilliant Gallery 5.x (Drupal module) before 5.x-4.2, enabling an attacker to inject arbitrary SQL via unspecified vectors. The vulnerability relates to the broader issue described in CVE-2008-4338, which specifies the brilliant_gallery_checklist_save funct...

Sql injection

SQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute arbitrary SQL commands via the pic parameter...

CVE-2008-4497

SQL injection vulnerability in eventdetail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

Sql injection

SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in searchresults.php in PHP Autos 2.9.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in viewcat.php in PHP Auto Dealer 2.7 allows remote attackers to execute arbitrary SQL commands via the vcat parameter...

Sql injection

SQL injection vulnerability in eventdetail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

Sql injection

SQL injection vulnerability in viewcat.php in PHP Realtor 1.5 allows remote attackers to execute arbitrary SQL commands via the vcat parameter...

CVE-2008-4494

SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4497

SQL injection vulnerability in eventdetail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2008-4496

SQL injection vulnerability in viewcat.php in PHP Realtor 1.5 allows remote attackers to execute arbitrary SQL commands via the vcat parameter...

CVE-2008-4494

SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4492

SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands via the usNick cookie...

Sql injection

SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands via the usNick cookie...

Sql injection

SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 sitename, 2 email, 3 themechosen, 4 hp, 5 cmeta, 6 id, and 7 cjs parameters. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

CVE-2008-4487

CVE-2008-4487 describes an SQL injection in Atarone CMS 1.2.0, specifically in ap-save.php. The vulnerability allows remote attackers to execute arbitrary SQL commands through the parameters: site_name, email, theme_chosen, hp, c_meta, id, and c_js. The entry notes that provenance is unknown and ...

CVE-2008-3063

SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4487: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 sitename, 2 email, 3 themechosen, 4 hp, 5 cmeta, 6 id, and 7 cjs parameters. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

CVE-2008-4496: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewcat.php in PHP Realtor 1.5 allows remote attackers to execute arbitrary SQL commands via the vcat parameter...

Sql injection

SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...