14595 matches found
CVE-2008-6348
CVE-2008-6348 affects DevelopItEasy Photo Gallery 1.2. The vulnerability is a SQL injection in multiple parameters: cat_id (gallery_category.php), photo_id (gallery_photo.php), and user_name/user_pass (admin/index.php). The underlying root cause is improper input handling that allows attackers to...
CVE-2008-6348
Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...
CVE-2008-6353
SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...
CVE-2008-6383: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SpeedTech Organization and Resource Manager Storm 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6362: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6381: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter...
CVE-2008-6338
SQL injection vulnerability in the WEBERkommunal Facilities wesfacilities extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the Volunteer Management System comvolunteer module 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jobid parameter in a jobshow action to index.php...
Sql injection
SQL injection vulnerability in news.php in RSS Simple News RSSSN, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the pid parameter...
Sql injection
SQL injection vulnerability in the WEBERkommunal Facilities wesfacilities extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6338
SQL injection vulnerability in the WEBERkommunal Facilities wesfacilities extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6344
SQL injection vulnerability in the TU-Clausthal Staff tucstaff 0.3.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6330
SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action...
Sql injection
SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action...
CVE-2008-6329
SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters, as reachable from Employee/emplogin.asp. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2008-6330
SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action...
CVE-2008-6332
SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2008-6329
The CVE-2008-6329 entry concerns a SQL injection vulnerability in Pre ASP Job Board, reported in Employee/login.asp (and reachable from Employee/emp_login.asp). The vulnerability is triggered by the Username and Password parameters, allowing remote attackers to execute arbitrary SQL commands. The...