15318 matches found
PT-2011-1959
Name of the Vulnerable Software and Affected Versions CuteSITE CMS versions 1.2.3 through 1.5.0 Description The issue allows remote authenticated users with Read privileges to execute arbitrary SQL commands. This is achieved via the user id parameter in the "manage/add user.php" endpoint...
CVE-2010-5044: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in models/log.php in the Search Log comsearchlog component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL commands via the search parameter in a log action to administrator/index.php. NOTE: some of these...
PT-2011-1971
Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the type parameter in the "addsale.php" file. Recommendations For iScripts eSwap version 2.0, consider restricting...
PT-2011-1954
Name of the Vulnerable Software and Affected Versions 2daybiz Online Classified Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the alb parameter in the view photo.php file. Recommendations At the moment,...
CVE-2010-5015: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in viewphoto.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter...
CVE-2010-5013: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in listingdetail.asp in Mckenzie Creations Virtual Real Estate Manager VRM 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter...
PT-2011-1950
Name of the Vulnerable Software and Affected Versions 2daybiz Network Community Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the alb parameter in the view photo.php file. Recommendations At the moment,...
CVE-2010-4984
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box...
CVE-2010-4996
SQL injection vulnerability in ogpshow.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search parameter...
CVE-2010-4982
SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...
CVE-2010-4983
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4986
SQL injection vulnerability in detail.php in Simple Document Management System SDMS allows remote attackers to execute arbitrary SQL commands via the docid parameter...
CVE-2010-4979
SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the imageid parameter...
CVE-2010-4981
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4977
SQL injection vulnerability in menu.php in the Canteen comcanteen component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php...
CVE-2010-4980
SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2010-4974
SQL injection vulnerability in info.php in BrotherScripts BS and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4975
SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...