Sql injection

Multiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the idurlo field in the deleteurlo function in a index.php in the urlobox module; the iden field in the 2 updatefile and 3 delfile functions in b index.php in the reviews module...

Sql injection

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php...

CVE-2007-3808

SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories parameter in a search action to index.php, a different vector than CVE-2005-2000...

Sql injection

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picturerealedit.asp, and probably other unspecified vectors...

Sql injection

SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL commands via the Password field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3789

The CVE-2007-3789 issue affects Inmostore 4.0, specifically the admin/index.php entry point. The vulnerability is a SQL injection in the Password field that permits remote attackers to execute arbitrary SQL commands. The available documents confirm the affected component (admin/index.php) and the...

CVE-2007-3013

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picturerealedit.asp, and probably other unspecified vectors...

CVE-2007-3789

SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL commands via the Password field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4...

CVE-2007-3783

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4...

Sql injection

SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVARSUBCAT txForumID parameter to forum/index.cfm and possibly other unspecified components, related to forum/include/error/forumerror.cfm...

CVE-2007-3705

SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVARSUBCAT txForumID parameter to forum/index.cfm and possibly other unspecified components, related to forum/include/error/forumerror.cfm...

Sql injection

Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script avtutorial 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 userid parameters, a different issue than CVE-2007-3630...

CVE-2007-3683

SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary SQL commands via the topicid parameter...

Sql injection

SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary SQL commands via the topicid parameter...

CVE-2007-3687

The vulnerability CVE-2007-3687 affects Inferno Technologies’ RPG Inferno (Inferno 2.4 and earlier). It is an SQL injection in inferno.php, in the vBulletin module, allowing remote authenticated attackers to execute arbitrary SQL commands via the id parameter in a ScanMember do action. Impact is ...

Sql injection

Multiple SQL injection vulnerabilities in Maxsi eVisit Analyst allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 idsp1.pl, 2 ip.pl, and 3 einsitedirector.pl. NOTE: this issue can be leveraged for path disclosure from resulting error messages...

CVE-2007-3677

Multiple SQL injection vulnerabilities in Maxsi eVisit Analyst allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 idsp1.pl, 2 ip.pl, and 3 einsitedirector.pl. NOTE: this issue can be leveraged for path disclosure from resulting error messages...

CVE-2007-3677

CVE-2007-3677 affects Maxsi eVisit Analyst. Multiple SQL injection vulnerabilities allow remote attackers to supply id to (1) idsp1.pl, (2) ip.pl, and (3) einsite_director.pl, enabling arbitrary SQL execution and potentially path disclosure through error messages. Exploitation details and fixes a...