11869 matches found
Sql injection
SQL injection vulnerability in detailsnews.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the idnew parameter...
CVE-2007-3575
SQL injection vulnerability in includes/functions in FreeDomain.co.nr Clone allows remote attackers to execute arbitrary SQL commands via the logindomain parameter to members.php...
Sql injection
SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4...
CVE-2007-3582
SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitrary SQL commands via the o parameter...
CVE-2007-3588
SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4...
CVE-2007-3583
SQL injection vulnerability in detailsnews.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the idnew parameter...
Sql injection
SQL injection vulnerability in admin/login.php in Wheatblog wB 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter...
CVE-2007-3563
SQL injection vulnerability in includes/viewpage.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewpage action to index.php...
Sql injection
SQL injection vulnerability in Coppermine Photo Gallery CPG before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component...
Sql injection
SQL injection vulnerability in includes/viewpage.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewpage action to index.php...
CVE-2007-3558
SQL injection vulnerability in Coppermine Photo Gallery CPG before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component...
Sql injection
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-3562
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-3549
SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 t and 2 f parameters in a qtiindpost.php and b qtiindpostprt.php; 3 dir and 4 order parameters in qtiindmember.php; 5 id parameter in...
CVE-2007-3538
SQL injection vulnerability in qtgmsgview.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in qtgmsgview.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...