CVE-2007-3447

SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the "basic search box." NOTE: 4.0.2 and other versions might also be affected...

Sql injection

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

Sql injection

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the member parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...

CVE-2007-3449

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2007-3452

SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL commands via the docid parameter in an inline action...

CVE-2007-3430

SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action...

CVE-2007-3449

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2007-3430

SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action...

CVE-2007-3453

SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the selmenuid parameter to certain components...

CVE-2007-3452

SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL commands via the docid parameter in an inline action...

CVE-2007-3411

SQL injection vulnerability in editimage.asp in ClickGallery Server 5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the imageid parameter...

Sql injection

Multiple SQL injection vulnerabilities in index.php in phpRaider 1.0.0 rc8 allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 type parameter...

CVE-2007-3411

SQL injection vulnerability in editimage.asp in ClickGallery Server 5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the imageid parameter...

Sql injection

Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the 1 artid parameter to mod.php in a viewarticle action publisher mod and the 2 bid parameter to banners.php in a click action. NOTE: the mod.php viewdisk and viewlink vectors are...

Sql injection

SQL injection vulnerability in admin.php in MyNews 0.10, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authacc cookie...

Sql injection

SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a pagetoolnews action...

Sql injection

SQL injection vulnerability in include/getuserdata.php in Power Phlogger PPhlogger 2.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.php...

CVE-2007-3402

SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a pagetoolnews action...

CVE-2007-3394

Summary (CVE-2007-3394): Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL via (1) the artid parameter to mod.php in a viewarticle action (publisher mod) and (2) the bid parameter to banners.php in a click action. The mod.php viewdisk and view...