Sql injection

SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a browse action...

CVE-2008-6458

SQL injection vulnerability in the FE address edit for ttaddress & direct mail dmaddredit extension 0.4.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6466

SQL injection vulnerability in imagegallery.php in the Akira Powered Image Gallery imagegallery plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action...

CVE-2008-6467

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

CVE-2008-6454

SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action...

Sql injection

SQL injection vulnerability in the Diocese of Portsmouth Church Search pdchurchsearch extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension for TYPO3, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Swigmore institute cgswigmore extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Random Prayer 2 steprayer2 extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6457

SQL injection vulnerability in the Swigmore institute cgswigmore extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6461

SQL injection vulnerability in the Random Prayer 2 steprayer2 extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6464

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6468

SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a browse action...

CVE-2008-6467

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

GLSA-200903-27 : ProFTPD: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200903-27 ProFTPD: Multiple vulnerabilities The following vulnerabilities were reported: Percent characters in the username are not properly handled, which introduces a single quote character during variable substitution by modsql...

CVE-2009-0882

Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to showtheme.php and the 2 user parameter to userinfo.php...

CVE-2009-0881

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0883

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...

Sql injection

Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to showtheme.php and the 2 user parameter to userinfo.php...

Sql injection

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...