CVE-2010-1661

Multiple SQL injection vulnerabilities in PHP-Quick-Arcade PHPQA 3.0.21 allow remote attackers to execute arbitrary SQL commands via the 1 phpqauserc parameter to Arcade.php and the 2 id parameter to acpmoderate.php...

CVE-2010-1654

Multiple SQL injection vulnerabilities in systemmemberlogin.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL commands via the 1 username aka login and 2 password parameters. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in the Airiny ABC comabc component 1.1.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the sectionid parameter in an abc action to index.php...

Sql injection

SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via the hpId parameter...

CVE-2010-1660

SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via the hpId parameter...

CVE-2010-1654

Multiple SQL injection vulnerabilities in systemmemberlogin.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL commands via the 1 username aka login and 2 password parameters. NOTE: some of these details are obtained from third party information...

CVE-2010-1615

Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands via vectors related to 1 the addtolog function in mod/wiki/view.php in the wiki module, or 2 "data validation in some forms elements" related to...

Sql injection

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsp parameter...

CVE-2010-1600

SQL injection vulnerability in the Media Mall Factory commediamall component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php...

CVE-2010-1604

Multiple SQL injection vulnerabilities in adminlogin.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 user parameter aka login field and 2 passwd parameter aka password field. NOTE: some of these details are obtained from third party information...

CVE-2010-1599

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsp parameter...

CVE-2010-1604

Multiple SQL injection vulnerabilities in adminlogin.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 user parameter aka login field and 2 passwd parameter aka password field. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

Sql injection

SQL injection vulnerability in printraincheck.php in phpRAINCHECK 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-1529

SQL injection vulnerability in the Freestyle FAQs Lite comfsf component, possibly 1.3, for Joomla! allows remote attackers to execute arbitrary SQL commands via the faqid parameter in an faq action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the storyid parameter to public/view.php or 2 the kill parameter to admin/remove.php...

Sql injection

SQL injection vulnerability in genreartists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 c parameter to index.php and the 2 id parameter to view.php...

Sql injection

SQL injection vulnerability in the Flat Manager flatmgr extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1496

SQL injection vulnerability in the JoltCard comjoltcard component 1.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cardID parameter in a view action to index.php...