CVE-2009-0881

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0882

CVE-2009-0882 corresponds to multiple SQL injection vulnerabilities in nForum 1.5. The affected components are the PHP scripts showtheme.php (id parameter) and userinfo.php (user parameter), with root cause described as insufficient input sanitization in SQL queries. Impact per sources indicates ...

CVE-2009-0883

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...

GLSA-200903-25 : Courier Authentication Library: SQL Injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200903-25 Courier Authentication Library: SQL Injection vulnerability It has been reported that some parameters used in SQL queries are not properly sanitized before being processed when using a non-Latin locale Postgres database...

ProFTPD: Multiple vulnerabilities

Background ProFTPD is an advanced and very configurable FTP server. Description The following vulnerabilities were reported: Percent characters in the username are not properly handled, which introduces a single quote character during variable substitution by modsql CVE-2009-0542. Some invalid,...

Courier Authentication Library: SQL Injection vulnerability

Background The Courier Authentication Library is a generic authentication API that encapsulates the process of validating account passwords. Description It has been reported that some parameters used in SQL queries are not properly sanitized before being processed when using a non-Latin locale...

Sql injection

SQL injection vulnerability in admin/deletepage.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0863

SQL injection vulnerability in admin/deletepage.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0825

SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in forumduzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter...

CVE-2008-6443

SQL injection vulnerability in forumduzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter...

Sql injection

Multiple SQL injection vulnerabilities in Social Site Generator SSG 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 sgcid parameter to displayblog.php, 2 scmmemid parameter to socialmyprofiledownload.php, and the 3 catid parameter to socialforumsubcategories.php...

Sql injection

SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter...

Sql injection

SQL injection vulnerability in macgurublogmenu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2008-2455. NOTE: it was later reported that 2.1.4 is also affected...

Sql injection

SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-6419

Multiple SQL injection vulnerabilities in Social Site Generator SSG 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 sgcid parameter to displayblog.php, 2 scmmemid parameter to socialmyprofiledownload.php, and the 3 catid parameter to socialforumsubcategories.php...

CVE-2008-6422

Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 weapon.php and 2 map.php...

Sql injection

SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via the newsid parameter, a different vector than CVE-2008-2456...

CVE-2008-6419

Multiple SQL injection vulnerabilities in Social Site Generator SSG 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 sgcid parameter to displayblog.php, 2 scmmemid parameter to socialmyprofiledownload.php, and the 3 catid parameter to socialforumsubcategories.php...