Sql injection

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

CVE-2008-6328

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6314

SQL injection vulnerability in tagboard.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...

Sql injection

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312...

Sql injection

SQL injection vulnerability in forummessages.cfm in CFForum allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter...

Sql injection

SQL injection vulnerability in calendarevent.cfm in CFCalendar allows remote attackers to execute arbitrary SQL commands via the calid parameter...

Sql injection

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category parameter in a ViewCategory action...

CVE-2008-6320

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category parameter in a ViewCategory action...

CVE-2008-6326

SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6314

CVE-2008-6314 describes a SQL injection in the Tag Board module for phpBB (version 4.0 and earlier), in the file tag_board.php. The vulnerability is exploitable via the id parameter in a delete action, enabling remote attackers to execute arbitrary SQL commands. The provided documents confirm the...

CVE-2008-6327

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312...

CVE-2008-6323

SQL injection vulnerability in forummessages.cfm in CFMSource CFAuction allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter...

CVE-2008-6319

SQL injection vulnerability in calendarevent.cfm in CFCalendar allows remote attackers to execute arbitrary SQL commands via the calid parameter...

CVE-2008-6328

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6319

CVE-2008-6319 describes an SQL injection in calendarevent.cfm of CF_Calendar via the calid parameter, allowing remote attackers to execute arbitrary SQL commands. The connected documents reiterate the vulnerable component and parameter but do not provide exploitation details or a remediation work...

CVE-2008-6324

CVE-2008-6324 is a SQL injection vulnerability in CF_Forum's forummessages.cfm, exploitable via the categorynbr parameter to execute arbitrary SQL commands remotely. The issue is documented without vendor-specific remediation details in the provided sources; exploitation status is not explicitly ...

Sql injection

SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL commands via the fpassword parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6309

The CVE-2008-6309 entry describes an SQL injection vulnerability in the W3matter AskPert application, specifically in index.php where the f[password] parameter can be exploited to execute arbitrary SQL commands. This is a remote, unauthenticated vector with network attack potential and a base imp...

Sql injection

SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magicquotesgpc is enabled and the SEO URLs are activated, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...