13318 matches found
Sql injection
SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...
CVE-2008-6003
SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...
CVE-2009-0293
SQL injection vulnerability in profileview.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2009-0296
SQL injection vulnerability in shopdisplayproducts.php in Script Toko Online 5.01 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2009-0292
SQL injection vulnerability in showcat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands via the grid parameter...
Sql injection
SQL injection vulnerability in showcat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands via the grid parameter...
Sql injection
SQL injection vulnerability in profileview.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter...
Sql injection
SQL injection vulnerability in logincheck.asp in ClickAuction allows remote attackers to execute arbitrary SQL commands via the 1 txtEmail and 2 txtPassword parameters. NOTE: some of these details are obtained from third party information...
CVE-2009-0295
SQL injection vulnerability in index.php in Information Technology Light Poll Information ITLPoll 2.7 Stable 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-0296
CVE-2009-0296 describes a SQL injection in the shop_display_products.php component of the Script Toko Online 5.01 application, exploitable via the cat_id parameter. The vulnerability can allow remote attackers to execute arbitrary SQL commands, with impact described in CVSS as Partial confidentia...
CVE-2009-0293
SQL injection vulnerability in profileview.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter...
Sql injection
SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password...
Sql injection
SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-0281
SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
CVE-2009-0287
SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password...
Sql injection
SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2009-0279
SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-0279
CVE-2009-0279 describes a SQL injection in Pardal CMS 0.2.0 and earlier, exploitable through comentar.php via the id parameter. Remote attackers can execute arbitrary SQL commands. The available documents identify the vulnerable component and impact but do not provide a remediation or patch detai...
CVE-2009-0281
SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
Sql injection
Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 password and 2 username fields...