13185 matches found
Sql injection
Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 email parameters in a showtickets action...
Sql injection
SQL injection vulnerability in JE Ajax Event Calendar comjeajaxeventcalendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an alleventlistmore action to index.php...
Sql injection
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the 1 selStock parameter to search.asp and the 2 orderBy parameter to showAlllistings.asp...
Sql injection
SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter...
CVE-2010-4357
SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter...
CVE-2008-7267
SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4356
SQL injection vulnerability in newsdefault.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitrary SQL commands via the txtSiteId parameter...
CVE-2010-4356
CVE-2010-4356 affects Site2Nite Big Truck Broker: SQL injection in news_default.asp via the txtSiteId parameter, enabling remote arbitrary SQL execution. Root cause: input from txtSiteId is not properly validated, allowing crafted queries. Affected component: news_default.asp; software: Site2Nite...
CVE-2010-4298
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...
Sql injection
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...
CVE-2010-4298
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloadsid parameter in a downloadnow action to index.php...
CVE-2010-4271
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4269
SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstartUSERTOID cookie in a pull action...
CVE-2010-4268
SQL injection vulnerability in the Pulse Infotech Flip Wall comflipwall component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
Sql injection
SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstartUSERTOID cookie in a pull action...
Sql injection
SQL injection vulnerability in the Pulse Infotech Flip Wall comflipwall component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
Sql injection
SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4268
SQL injection vulnerability in the Pulse Infotech Flip Wall comflipwall component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
CVE-2010-4273
SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4271
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...