Sql injection

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise ESE allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action...

CVE-2008-5751

CVE-2008-5751 is a SQL injection vulnerability in index.php of AlstraSoft Web Email Script Enterprise (ESE). The issue arises from unsafely handling the id parameter in a directory action, allowing remote attackers to inject SQL and execute arbitrary commands against the backend database. This en...

CVE-2008-5751

SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise ESE allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action...

CVE-2008-5737

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in evb/checkurl.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter...

CVE-2008-5726

SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5727

SQL injection vulnerability in modules/auth/passwordrecovery.php in AIST NetCat 3.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the query string...

Sql injection

SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5726

SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5727

SQL injection vulnerability in modules/auth/passwordrecovery.php in AIST NetCat 3.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the query string...

Sql injection

SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter...

CVE-2008-5707

SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter...

Sql injection

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors...

CVE-2008-2380

SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes...

Sql injection

SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes...

CVE-2008-2380

SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes...

CVE-2008-2380

SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes...

Sql injection

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall BSF before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a patternx parameter in a searchcountequals action, as demonstrated by the pattern0 parameter...

Sql injection

SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter...

CVE-2008-5650

SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter...