Sql injection

SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a member action...

Sql injection

SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly related to admin/adminalbum.php and admin/admindownloads.php. NOTE: some of these details are obtained from thi...

CVE-2007-3646

The advisory details a SQL injection in FlashGameScript 1.7 and earlier, via the user parameter in a member action of index.php. The root cause is unvalidated user input leading to arbitrary SQL execution, with the impact described as partial confidentiality, integrity, and availability. The sour...

CVE-2007-3646

SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a member action...

Sql injection

SQL injection vulnerability in MKPortal 1.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZD-00000008. this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release...

Sql injection

SQL injection vulnerability in index.php in GameSiteScript gss 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the params parameter, related to missing input validation of the id field...

CVE-2007-3637

The CVE-2007-3637 entry describes a SQL injection vulnerability in MKPortal 1.1.1 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The root cause is a SQL injection flaw in MKPortal 1.1.1, with impact described as unauthorized database command execution. The...

Sql injection

Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...

Sql injection

SQL injection vulnerability in oku.asp in Levent Veysi Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3627

Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...

Sql injection

SQL injection vulnerability in categoriestype.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 b.php and 2 account/gallery.php, and other unspecified vectors...

CVE-2007-3603

SQL injection vulnerability in the dashboard include/utils/SearchUtils.php in vtiger CRM before 5.0.3 allows remote authenticated users to execute arbitrary SQL commands via the assigneduserid parameter in a Potentials ListView action to index.php...

CVE-2007-3610

SQL injection vulnerability in categoriestype.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-3603

CVE-2007-3603 affects vtiger CRM prior to 5.0.3. A SQL injection vulnerability exists in the dashboard (include/utils/SearchUtils.php) allowing remote authenticated users to execute arbitrary SQL via the assigned_user_id parameter in a Potentials ListView action to index.php. This is supported by...

CVE-2007-3610

SQL injection vulnerability in categoriestype.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-3589

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 showthread.php or 2 showboard.php...

Sql injection

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 showthread.php or 2 showboard.php...

Sql injection

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitrary SQL commands via the o parameter...

Sql injection

SQL injection vulnerability in includes/functions in FreeDomain.co.nr Clone allows remote attackers to execute arbitrary SQL commands via the logindomain parameter to members.php...