CVE-2010-2338

Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-2339

SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids parameter in an updatepages action...

CVE-2010-2338

The CVE-2010-2338 entry concerns multiple SQL injection vulnerabilities in redir.asp of VU Web Visitor Analyst, exploitable by passing crafted values to the (1) username or (2) password parameters to trigger arbitrary SQL execution. This is supported by the core description across NVD/NVD-derived...

Sql injection

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter...

CVE-2010-2335

SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter...

Sql injection

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search, 2 sbr, 3 pid, 4 sbl, and 5 FilePath parameters to default.asp; and the 6 sbr, 7 pr, and 8 psPrice parameters to printpage.asp...

Sql injection

SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-2319

SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action...

CVE-2009-4891

SQL injection vulnerability in index.php in CS-Cart 2.0.0 Beta 3 allows remote attackers to execute arbitrary SQL commands via the productid parameter in a products.view action...

Sql injection

Multiple SQL injection vulnerabilities in phpCommunity 2 2.1.8, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the forumid parameter in a forum action to index.php, 2 the topicid parameter in a forum action to index.php, 3 the wert parameter in an ...

Sql injection

SQL injection vulnerability in books.php in the Book Panel bookpanel module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

Sql injection

SQL injection vulnerability in index.php in CS-Cart 2.0.0 Beta 3 allows remote attackers to execute arbitrary SQL commands via the productid parameter in a products.view action...

Sql injection

SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL commands via the 1 baseid or 2 courseid parameter in a search action...

CVE-2009-4892

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 portfoliogenre.php and 2 newsid.php...

Sql injection

SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php...

SQL Injection Vulnerabilities in Mac's CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Mac's CMS which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Mac's CMS 1.1 The vulnerability exists due to input sanitation errors in the “commentId” parameter in index.ph...

Sql injection

SQL injection vulnerability in indexie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in EMC RSA Key Manager RKM C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL commands via the metadata section of encrypted key data...

CVE-2010-1904

RSA Key Manager (RKM) C Client 1.5.x is vulnerable to SQL injection via the metadata in encrypted data, allowing an attacker to manipulate the KeyTable/config caching data and potentially modify or delete encryption keys. The vulnerability arises from improper validation of metadata during key lo...