CVE-2004-2716

CVE-2004-2716 describes multiple SQL injection vulnerabilities in PHPMyChat 0.14.5’s usersL.php3, allowing remote attackers to execute arbitrary SQL commands via parameters (sortBy, sortOrder, startReg, U, LastCheck, R). The underlying issue is unsafely constructed SQL queries in that script, ena...

CVE-2007-5261

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to categorydetail.php and the 2 ddlCategory parameter to search.php...

CVE-2007-5261

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to categorydetail.php and the 2 ddlCategory parameter to search.php...

Sql injection

SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a readmore action...

CVE-2007-5233

SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a readmore action...

Sql injection

SQL injection vulnerability in index.php in MAXdev MDPro MD-Pro 1.0.76 allows remote attackers to execute arbitrary SQL commands via a "Firefox ID=" substring in a Referer HTTP header...

CVE-2007-5222

SQL injection vulnerability in index.php in MAXdev MDPro MD-Pro 1.0.76 allows remote attackers to execute arbitrary SQL commands via a "Firefox ID=" substring in a Referer HTTP header...

CVE-2007-5220

SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters...

Sql injection

SQL injection vulnerability in index.php in the MambAds commambads 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter...

Sql injection

SQL injection vulnerability in infusions/calendareventspanel/showsingle.php in the Expanded Calendar 2.x module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the sel parameter...

CVE-2007-5177

SQL injection vulnerability in index.php in the MambAds commambads 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter...

CVE-2007-5181

SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilanid parameter...

Sql injection

Multiple SQL injection vulnerabilities in mesadd.php in x-script GuestBook 1.3a, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 icq, and 4 website parameters...

Sql injection

Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands via the 1 Kategori parameter in satilik.asp and the 2 Emlak parameter in detay.asp...

Sql injection

SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilanid parameter...

CVE-2007-5181

SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilanid parameter...

CVE-2007-5180

CVE-2007-5180 describes multiple SQL injection vulnerabilities in Ohesa Emlak Portali, allowing remote attackers to execute arbitrary SQL via (1) Kategori in satilik.asp and (2) Emlak in detay.asp. Root cause is improper input handling for these parameters, enabling unsanitized input to be embedd...

CVE-2007-5189

Multiple SQL injection vulnerabilities in mesadd.php in x-script GuestBook 1.3a, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 icq, and 4 website parameters...

CVE-2007-5084

Multiple SQL injection vulnerabilities in Computer Associates CA BrightStor Hierarchical Storage Manager HSM before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes 1 0x07, 2 0x08, 3 0x09, 4 0x1E, 5 0x32, 6 0x36, 7 0x40, and possibly others...

Sql injection

SQL injection vulnerability in the abgetadmin function in includes/nukesentinel.php in NukeSentinel 2.5.12 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie...