13440 matches found
CVE-2008-3056
SQL injection vulnerability in the Codeon Petition cdpetition extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3034
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 IdFlux parameter to admin/fonctions/supprimerflux.php and the 2 IdTag parameter to admin/fonctions/supprimertag.php...
Sql injection
SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier allows remote authenticated users to execute arbitrary SQL commands via the boardID parameter...
CVE-2008-3030
SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in an urunler action...
CVE-2008-3034
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 IdFlux parameter to admin/fonctions/supprimerflux.php and the 2 IdTag parameter to admin/fonctions/supprimertag.php...
CVE-2008-3026
SQL injection vulnerability in index.php in OneClick CMS aka Sisplet CMS 2008-01-24 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3044
SQL injection vulnerability in the News Calendar newscalendar extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3044: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the News Calendar newscalendar extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3039: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3053: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the SQL Frontend mhomsqlio extension 1.0.11 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3051: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Pinboard extension 0.0.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3054: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Branchenbuch aka Yellow Pages o mhbranchenbuch extension 0.8.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3055: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Support view exttbl extension 0.0.102 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3056: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Codeon Petition cdpetition extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-2995
Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via 1 the annuaire parameter to annuaire.php or 2 the username field in admin/login.php...
Sql injection
Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via 1 the annuaire parameter to annuaire.php or 2 the username field in admin/login.php...
CVE-2008-2996
Multiple SQL injection vulnerabilities in index.php in Gravity Board X GBX 2.0 Beta, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchquery parameter in a getsearch action, and the 2 boardid parameter in a viewboard action...
CVE-2008-2999
Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-2995
PHPEasyData 1.5.4 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. The affected entry notes two injection vectors: (1) the annuaire parameter to annuaire.php and (2) the username field in admin/login.php. The NVD listing documents a CV...
CVE-2008-2999: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors...