phpRAINCHECK 'print_raincheck.php' SQL injection vulnerability

phpRAINCHECK is prone to a SQL injection vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1706: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via 1 the login field aka the username parameter, and possibly 2 the password field, to index.php. NOTE: some of these details are obtained from third party...

CVE-2010-1704: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in 2daybiz Polls aka Advanced Poll Script allow remote attackers to execute arbitrary SQL commands via 1 the password field to login.php, 2 the login field aka email parameter to login.php, 3 the password field aka pass parameter to the default URI under...

CVE-2010-1661

Multiple SQL injection vulnerabilities in PHP-Quick-Arcade PHPQA 3.0.21 allow remote attackers to execute arbitrary SQL commands via the 1 phpqauserc parameter to Arcade.php and the 2 id parameter to acpmoderate.php...

CVE-2010-1654

Multiple SQL injection vulnerabilities in systemmemberlogin.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL commands via the 1 username aka login and 2 password parameters. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in the Airiny ABC comabc component 1.1.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the sectionid parameter in an abc action to index.php...

Sql injection

SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via the hpId parameter...

CVE-2010-1660

SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via the hpId parameter...

CVE-2010-1654

Multiple SQL injection vulnerabilities in systemmemberlogin.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL commands via the 1 username aka login and 2 password parameters. NOTE: some of these details are obtained from third party information...

CVE-2010-1615

Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands via vectors related to 1 the addtolog function in mod/wiki/view.php in the wiki module, or 2 "data validation in some forms elements" related to...

CVE-2010-1600

SQL injection vulnerability in the Media Mall Factory commediamall component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php...

Sql injection

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsp parameter...

CVE-2010-1604

Multiple SQL injection vulnerabilities in adminlogin.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 user parameter aka login field and 2 passwd parameter aka password field. NOTE: some of these details are obtained from third party information...

CVE-2010-1599

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsp parameter...

CVE-2010-1604

Multiple SQL injection vulnerabilities in adminlogin.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 user parameter aka login field and 2 passwd parameter aka password field. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

CVE-2010-1588: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

Sql injection

SQL injection vulnerability in printraincheck.php in phpRAINCHECK 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-1529

SQL injection vulnerability in the Freestyle FAQs Lite comfsf component, possibly 1.3, for Joomla! allows remote attackers to execute arbitrary SQL commands via the faqid parameter in an faq action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the storyid parameter to public/view.php or 2 the kill parameter to admin/remove.php...