Sql injection

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php...

Sql injection

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...

Sql injection

SQL injection vulnerability in the brilliantgallerychecklistsave function in the bgchecklist/save script in Brilliant Gallery 5.x and 6.x, a module for Drupal, allows remote authenticated users with "access brilliantgallery" permissions to execute arbitrary SQL commands via the 1 nid, 2 qid, 3...

CVE-2008-4328

SQL injection vulnerability in sitesearch.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the 1 item, 2 searchordermethod, and 3 searchorder parameters...

CVE-2008-4332

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php...

CVE-2008-4338

SQL injection vulnerability in the brilliantgallerychecklistsave function in the bgchecklist/save script in Brilliant Gallery 5.x and 6.x, a module for Drupal, allows remote authenticated users with "access brilliantgallery" permissions to execute arbitrary SQL commands via the 1 nid, 2 qid, 3...

CVE-2008-4094

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...

CVE-2008-4350: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-4241

SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie...

Sql injection

SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie...

CVE-2008-4203

SQL injection vulnerability in cnusers.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQL commands via a recook cookie...

CVE-2008-4205

SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a Search action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4202

SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL commands via the idd parameter in a deadlink action...

Sql injection

SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL commands via the idd parameter in a deadlink action...

Sql injection

SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System HRS allows remote attackers to execute arbitrary SQL commands via the city parameter...

CVE-2008-4203

CVE-2008-4203 – A SQL injection in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQL commands via a recook cookie. The vulnerability affects CzarNews versions up to 1.20; exploit details and impact are described in public databases (e.g., NVD). The connect...

CVE-2008-4205

CVE-2008-4205 concerns SQL injection in Attachmax Dolphin

CVE-2008-4202

SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL commands via the idd parameter in a deadlink action...

CVE-2008-4204

SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System HRS allows remote attackers to execute arbitrary SQL commands via the city parameter...

CVE-2008-4150

SQL injection vulnerability in picturecategory.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763...