CVE-2009-2036

SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in bin/apsbrowsesources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the sourceclass parameter in a browseclasses action...

Sql injection

SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2009-2021

SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2009-2023

SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the currentcurrency parameter...

Sql injection

SQL injection vulnerability in the ComSchool comschool component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php...

CVE-2009-2019

SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...

Sql injection

SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter...

CVE-2009-2017

SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-2021

SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2009-2016

SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-2013

The CVE-2009-2013 entry concerns a SQL injection in Frontis 3.9.01.24. The vulnerability is triggered via the source_class parameter in the browse_classes action of bin/aps_browse_sources.php, allowing remote attackers to execute arbitrary SQL commands. The affected product/version is Frontis 3.9...

CVE-2009-2019

CVE-2009-2019 pertains to a SQL injection in Virtue News Manager, specifically in news_detail.php where the nid parameter can be exploited to run arbitrary SQL on the backend. Affected component/file: news_detail.php; vulnerable parameter: nid; underlying issue is a lack of input validation/param...

CVE-2009-2014

SQL injection vulnerability in the ComSchool comschool component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php...

CVE-2009-2017

SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-2010

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS FCMS 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 thread parameter to messageboard.php, 2 member parameter to profile.php, 3 pid parameter to gallery/index.php, and the 4...

CVE-2009-2004

Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 student and 2 course parameters, a different vector than CVE-2007-2902...

Sql injection

Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 student and 2 course parameters, a different vector than CVE-2007-2902...

Sql injection

Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 uInfo parameter to main/tracking/userLog.php and the 2 course parameter to main/mySpace/lptracking.php, a different vector than CVE-2009-2006.2...

Sql injection

SQL injection vulnerability in webCal3detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...