Sql injection

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 hal.php, 2 cetak.php, 3 lihat.php, 4 pesan.php, and 5 teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to t...

CVE-2007-4804

AuraCMS 1.5rc is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands through the id parameter in hal.php, cetak.php, lihat.php, pesan.php, and teman.php. In some cases the scripts are reachable via requests to the product’s top-level UR...

Sql injection

Multiple SQL injection vulnerabilities in the content component comcontent in Joomla! 1.5 Beta1, Beta2, and RC1 allow remote attackers to execute arbitrary SQL commands via the filter parameter in an archive action to 1 archive.php, 2 category.php, or 3 section.php in models/. NOTE: this may be t...

Sql injection

Multiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 pass fields, different vectors than CVE-2007-0092...

Sql injection

SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

CVE-2007-4736

SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

Sql injection

Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in errorview.php in Yvora 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2007-4719

SQL injection vulnerability in read.php in 212cafeBoard 6.30 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4714

SQL injection vulnerability in errorview.php in Yvora 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2007-4716

Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-4714

SQL injection vulnerability in errorview.php in Yvora 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2007-4634

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the 1 user or 2 admin logon page, a...

CVE-2007-4645

CVE-2007-4645 affects NMDeluxe 2.0.0; SQL injection vulnerability in index.php (via the newspost do action id parameter) allows remote attackers to execute arbitrary SQL commands. Root cause appears to be unsanitized input used in SQL queries. The provided connected documents confirm the version ...

Sql injection

SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4627

SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2007-4611

SQL injection vulnerability in viewevent.php in Moonware aka Dale Mooney Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter...