CVE-2008-6693: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Download system sbdownloader extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6694: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Random Prayer steprayer 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6695: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in TIMTAB social bookmark icons timtabsociable 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6696: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Fussballtippspiel toto 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6697: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6691: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Diocese of Portsmouth Calendar Today pdcalendartoday extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-1277

SQL injection vulnerability in index.php in Gravity Board X GBX 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the memberid parameter in a viewprofile action. NOTE: the boardid issue is already covered by CVE-2008-2996.2...

Sql injection

SQL injection vulnerability in index.php in Gravity Board X GBX 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the memberid parameter in a viewprofile action. NOTE: the boardid issue is already covered by CVE-2008-2996.2...

CVE-2009-1282

SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the glfsession cookie parameter...

CVE-2008-6678

SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp...

CVE-2008-6663

PHPAuctions.info/PHPAuctionSystem shows a SQL injection vulnerability in profile.php. The affected component is the profile handling (profile.php) with input via auction_id (and related CVE entries also cite user_id). The root cause is improper handling of input leading to arbitrary SQL execution...

Sql injection

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in subcommententry.php in the BookJoomlas combookjoomlas component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php...

CVE-2009-1256

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1258

SQL injection vulnerability in the RD-Autos comrdautos component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1263

SQL injection vulnerability in subcommententry.php in the BookJoomlas combookjoomlas component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php...

CVE-2009-1256

The vulnerability described for CVE-2009-1256 is a SQL injection in FlexCMS 2.5, exploitable via the ItemId parameter. The affected component is FlexCMS 2.5 (web application), with the root cause being improper handling of ItemId leading to arbitrary SQL commands execution. Reported impact includ...

CVE-2009-1256

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1259

SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a topic action to index.php...

CVE-2009-1263

SQL injection vulnerability in subcommententry.php in the BookJoomlas combookjoomlas component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php...