13665 matches found
CVE-2010-0951
SQL injection vulnerability in gotarget.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via the kontentid parameter...
CVE-2010-0955
The CVE-2010-0955 entry refers to a SQL injection in Bild Flirt Community 2.0, specifically in index.php where the id parameter can be exploited to execute arbitrary SQL commands remotely. Affected component: Bild Flirt Community 2.0 (index.php). Root cause: unsafely concatenated id parameter in ...
OpenCart 1.3.2 SQL Injection
Andrés Gómez Exploit Title : OpenCart 1.3.2 SQL Injection Date : 07/03/2010 Author : Andrés Gómez Software Link : http://www.coompras.com/opencart/opencart.htm Contact : gomezandres4tadinetdotcom.uy Dork : No DoRk An attacker may execute arbitrary SQL statements on the vulnerable system. This may...
Sql injection
SQL injection vulnerability in the Keep It Simple Stupid KISS Software Advertiser comksadvertiser component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showcats action to index.php...
Sql injection
SQL injection vulnerability in the HotBrackets Tournament Brackets comhotbrackets component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
Sql injection
SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...
Sql injection
Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via 1 the loginus parameter to Login.php or 2 the Old Password field to changepwd.php, and allow 3 remote authenticated administrators to execute arbitrary SQL commands via the id...
Sql injection
SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL commands via the formID parameter...
CVE-2009-4673
CVE-2009-4673 concerns a SQL injection in profile.php of the Mole Group Adult Portal Script, exploitable via the user_id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands (impact: partial confidentiality, integrity, and availability according to NVD). Public r...
CVE-2010-0796
SQL injection vulnerability in the JE Quiz comjequizmanagement component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a question action to index.php...
Sql injection
SQL injection vulnerability in index.php in nv2 Awards 1.1.0, a modification for Invision Power Board, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...
Sql injection
SQL injection vulnerability in the JE Quiz comjequizmanagement component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a question action to index.php...
Sql injection
SQL injection vulnerability in the Ossolution Team Documents Seller aka DMS comdms component 2.5.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewcategory action to index.php...
Sql injection
SQL injection vulnerability in the jVideoDirect comjvideodirect component 1.1 RC3b for Joomla! allows remote attackers to execute arbitrary SQL commands via the v parameter to index.php...
CVE-2010-0795
SQL injection vulnerability in the JE Event Calendars comjeeventcalendar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an event action to index.php...
CVE-2010-0796
SQL injection vulnerability in the JE Quiz comjequizmanagement component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a question action to index.php...
CVE-2010-0764
SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action...
Sql injection
SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...