CVE-2008-6314

CVE-2008-6314 describes a SQL injection in the Tag Board module for phpBB (version 4.0 and earlier), in the file tag_board.php. The vulnerability is exploitable via the id parameter in a delete action, enabling remote attackers to execute arbitrary SQL commands. The provided documents confirm the...

CVE-2008-6319

SQL injection vulnerability in calendarevent.cfm in CFCalendar allows remote attackers to execute arbitrary SQL commands via the calid parameter...

CVE-2008-6328

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6327

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312...

CVE-2008-6323

SQL injection vulnerability in forummessages.cfm in CFMSource CFAuction allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter...

CVE-2008-6319

CVE-2008-6319 describes an SQL injection in calendarevent.cfm of CF_Calendar via the calid parameter, allowing remote attackers to execute arbitrary SQL commands. The connected documents reiterate the vulnerable component and parameter but do not provide exploitation details or a remediation work...

CVE-2008-6324

CVE-2008-6324 is a SQL injection vulnerability in CF_Forum's forummessages.cfm, exploitable via the categorynbr parameter to execute arbitrary SQL commands remotely. The issue is documented without vendor-specific remediation details in the provided sources; exploitation status is not explicitly ...

Sql injection

SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL commands via the fpassword parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6309

The CVE-2008-6309 entry describes an SQL injection vulnerability in the W3matter AskPert application, specifically in index.php where the f[password] parameter can be exploited to execute arbitrary SQL commands. This is a remote, unauthenticated vector with network attack potential and a base imp...

Sql injection

SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magicquotesgpc is enabled and the SEO URLs are activated, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6303

SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands via the tourid parameter...

Sql injection

SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands via the tourid parameter...

CVE-2008-6301

SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...

Sql injection

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter...

Sql injection

SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...

CVE-2008-6301

SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...

Sql injection

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via 1 the email parameter aka username or E-mail field, or 2 the password parameter aka password field, to a Subscriber.asp or b start.asp. NOTE: some of...

CVE-2008-6274

Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the logmbr parameter aka login field or 2 the mdpmbr parameter aka pass or "Mot de passe" field. NOTE: some of these details are obtained from third party...

CVE-2008-6282

SQL injection vulnerability in engine/users/userseditpub.inc in CMS Ortus 1.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the city parameter in a userseditpub action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the logmbr parameter aka login field or 2 the mdpmbr parameter aka pass or "Mot de passe" field. NOTE: some of these details are obtained from third party...