CVE-2009-0709

The CVE-2009-0709 entry describes a SQL injection vulnerability in PHPFootball 1.6, specifically in login.php where the user parameter can be used by remote attackers to execute arbitrary SQL commands. Affected component: PHPFootball 1.6 (login.php). Underlying cause: unsanitized user input leadi...

CVE-2008-6241

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPSite 0.0.1 and 0.0.7, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the checkuser parameter aka username field, or 2 the checkpass parameter aka password field, to...

CVE-2008-6237

SQL injection vulnerability in software-description.php in Scripts For Sites SFS Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in the ResendEmail module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the userprefix parameter to modules.php...

Sql injection

SQL injection vulnerability in login.php in Simple Document Management System SDMS 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Sql injection

SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2008-6234

SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2008-6234

SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2008-6233

SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitrary SQL commands via the recid parameter...

Sql injection

SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies spread out such false informations...

Sql injection

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6230

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in buyerdetail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the 1 sid and 2 cid parameters...

CVE-2008-6226

SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter...

CVE-2008-6227

The CVE-2008-6227 entry describes a SQL injection vulnerability in the buyer_detail.php component of a Pre Multi-Vendor Shopping Malls system. The vulnerability arises via the (1) sid and (2) cid parameters, allowing remote attackers to inject arbitrary SQL commands. The underlying root cause is ...

CVE-2008-6227

SQL injection vulnerability in buyerdetail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the 1 sid and 2 cid parameters...

CVE-2008-6230

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6233

SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitrary SQL commands via the recid parameter...

CVE-2008-6220

SQL injection vulnerability in login.php in Simple Document Management System SDMS 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter...

Sql injection

SQL injection vulnerability in mypage.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary SQL commands via the trg parameter...