Sql injection

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

Sql injection

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...

CVE-2008-6788

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

CVE-2008-6788

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

Sql injection

SQL injection vulnerability in the xforumvalidateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookieusername parameter to Configure.php...

CVE-2009-1509

SQL injection vulnerability in ajaxpbackend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2009-1508

SQL injection vulnerability in the xforumvalidateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookieusername parameter to Configure.php...

Sql injection

SQL injection vulnerability in ajaxpbackend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-6787

SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user...

CVE-2009-1508

CVE-2009-1508 affects X-Forum 0.6.2. The vulnerability is an SQL injection in the function xforum_validateUser in Common.php , allowing remote attackers to execute arbitrary SQL commands via the cookie_username parameter to Configure.php. The NVD entry and related records confirm the issue and im...

CVE-2009-1509

SQL injection vulnerability in ajaxpbackend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter...

Sql injection

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-6781

SQL injection vulnerability in directory.php in Sites for Scripts SFS Gaming Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in viewcomments.php in Scripts For Sites SFS EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter...

Sql injection

SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in directory.php in Scripts for Sites SFS SFS EZ Affiliate allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in directory.php in Sites for Scripts SFS Gaming Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showcontent action to modules.php...

Sql injection

SQL injection vulnerability in viewfaqs.php in Scripts for Sites SFS EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter...