CVE-2008-6809

SQL injection vulnerability in hotelhabitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allows remote attackers to execute arbitrary SQL commands via the HotelID parameter...

CVE-2009-1657: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2009-1651

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

Sql injection

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

Sql injection

Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the 1 user name userid parameter and 2 password...

CVE-2009-1651

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

Sql injection

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the ordersn parameter in an orderquery action...

Sql injection

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-6808

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2009-1626

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-6805

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2009-1613

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchterm or 2 email parameter...

Sql injection

SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2008-6805

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2008-6803

SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...