CVE-2008-6372

The CVE-2008-6372 entry describes a SQL injection in Ocean12 FAQ Manager Pro 1.0. The vulnerability affects default.asp in the Cat action, where the ID parameter can be manipulated to execute arbitrary SQL commands remotely. The root cause is improper input handling leading to SQL injection. Impa...

CVE-2008-6371

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2008-6379

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6383

SQL injection vulnerability in SpeedTech Organization and Resource Manager Storm 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6376

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password pass parameter...

CVE-2008-6378

SQL injection vulnerability in calendarEventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6352

SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter...

CVE-2008-6365

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...

CVE-2008-6362

SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...

Sql injection

SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...

CVE-2008-6358

SQL injection vulnerability in groupindex.php in Social Groupie allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter...

Sql injection

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter...

Sql injection

SQL injection vulnerability in surveyresultstext.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6348

Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...

CVE-2008-6349

SQL injection vulnerability in surveyresultstext.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6366

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...