CVE-2008-6697

SQL injection vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6694

SQL injection vulnerability in Random Prayer steprayer 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6697

SQL injection vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6695

CVE-2008-6695 affects the TIMTAB social bookmark icons (timtab_sociable) TYPO3 extension (versions 2.0.4 and earlier). The root cause is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unknown vectors. Impact is high priority (remote access with p...

CVE-2008-6695

SQL injection vulnerability in TIMTAB social bookmark icons timtabsociable 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6689

SQL injection vulnerability in JobControl dmmjobcontrol 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-1277

SQL injection vulnerability in index.php in Gravity Board X GBX 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the memberid parameter in a viewprofile action. NOTE: the boardid issue is already covered by CVE-2008-2996.2...

Sql injection

SQL injection vulnerability in index.php in Gravity Board X GBX 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the memberid parameter in a viewprofile action. NOTE: the boardid issue is already covered by CVE-2008-2996.2...

CVE-2009-1282

SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the glfsession cookie parameter...

CVE-2008-6678

SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp...

CVE-2008-6663

PHPAuctions.info/PHPAuctionSystem shows a SQL injection vulnerability in profile.php. The affected component is the profile handling (profile.php) with input via auction_id (and related CVE entries also cite user_id). The root cause is improper handling of input leading to arbitrary SQL execution...

Sql injection

SQL injection vulnerability in subcommententry.php in the BookJoomlas combookjoomlas component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php...

CVE-2009-1258

SQL injection vulnerability in the RD-Autos comrdautos component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1263

SQL injection vulnerability in subcommententry.php in the BookJoomlas combookjoomlas component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php...

Sql injection

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1256

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1256

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1256

The vulnerability described for CVE-2009-1256 is a SQL injection in FlexCMS 2.5, exploitable via the ItemId parameter. The affected component is FlexCMS 2.5 (web application), with the root cause being improper handling of ItemId leading to arbitrary SQL commands execution. Reported impact includ...

CVE-2009-1263

SQL injection vulnerability in subcommententry.php in the BookJoomlas combookjoomlas component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php...

CVE-2009-1259

SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a topic action to index.php...