CVE-2008-6663

PHPAuctions.info/PHPAuctionSystem shows a SQL injection vulnerability in profile.php. The affected component is the profile handling (profile.php) with input via auction_id (and related CVE entries also cite user_id). The root cause is improper handling of input leading to arbitrary SQL execution...

Sql injection

SQL injection vulnerability in subcommententry.php in the BookJoomlas combookjoomlas component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php...

CVE-2009-1258

SQL injection vulnerability in the RD-Autos comrdautos component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1263

SQL injection vulnerability in subcommententry.php in the BookJoomlas combookjoomlas component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php...

Sql injection

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1256

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1256

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1263

SQL injection vulnerability in subcommententry.php in the BookJoomlas combookjoomlas component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php...

CVE-2009-1256

The vulnerability described for CVE-2009-1256 is a SQL injection in FlexCMS 2.5, exploitable via the ItemId parameter. The affected component is FlexCMS 2.5 (web application), with the root cause being improper handling of ItemId leading to arbitrary SQL commands execution. Reported impact includ...

CVE-2009-1259

SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a topic action to index.php...

CVE-2008-6652

SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the sitename parameter...

CVE-2008-6653

SQL injection vulnerability in webhosting.php in the Webhosting Component comwebhosting module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2008-6634

SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idroom parameter to weekview.php...

CVE-2008-6649

SQL injection vulnerability in manager/imagedetailseditor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idresa parameter to resaopen.php...

Sql injection

SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the sitename parameter...

Sql injection

SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idroom parameter to weekview.php...

Sql injection

SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL commands via the sid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in manager/imagedetailseditor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter...