13327 matches found
CVE-2008-6338
SQL injection vulnerability in the WEBERkommunal Facilities wesfacilities extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the Volunteer Management System comvolunteer module 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jobid parameter in a jobshow action to index.php...
Sql injection
SQL injection vulnerability in news.php in RSS Simple News RSSSN, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the pid parameter...
Sql injection
SQL injection vulnerability in the WEBERkommunal Facilities wesfacilities extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6338
SQL injection vulnerability in the WEBERkommunal Facilities wesfacilities extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6344
SQL injection vulnerability in the TU-Clausthal Staff tucstaff 0.3.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6330
SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action...
Sql injection
SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action...
CVE-2008-6329
SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters, as reachable from Employee/emplogin.asp. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2008-6332
SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2008-6330
SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action...
CVE-2008-6329
The CVE-2008-6329 entry concerns a SQL injection vulnerability in Pre ASP Job Board, reported in Employee/login.asp (and reachable from Employee/emp_login.asp). The vulnerability is triggered by the Username and Password parameters, allowing remote attackers to execute arbitrary SQL commands. The...
Sql injection
SQL injection vulnerability in index.cfm in CFMSource CFMBlog allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter...
Sql injection
SQL injection vulnerability in tagboard.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
CVE-2008-6312
SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2008-6319
SQL injection vulnerability in calendarevent.cfm in CFCalendar allows remote attackers to execute arbitrary SQL commands via the calid parameter...
Sql injection
SQL injection vulnerability in forummessages.cfm in CFMSource CFAuction allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter...
Sql injection
SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312...
Sql injection
SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...