CVE-2008-4169

SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter...

CVE-2008-4171

SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...

Sql injection

SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI...

Sql injection

SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page pageid parameter...

Sql injection

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected...

Sql injection

SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter...

Sql injection

SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-4171

CVE-2008-4171 affects Invision Power Board (IPB) 2.2.x and 2.3.x, with a SQL injection in xmlout.php where the name parameter can be manipulated to execute arbitrary SQL commands. The NVD entry cites a remote attacker, with a base score of 7.5 (high) and impact on confidentiality, integrity, and ...

CVE-2008-4169

SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter...

CVE-2008-4173

SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI...

CVE-2008-4171

SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-4161

SQL injection vulnerability in searchinv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and orderby parameters in a searchall action...

CVE-2008-4157

CVE-2008-4157 documents an SQL injection in phpVID (Vastal I-Tech) groups.php via the cat parameter affecting PHPVID 1.1 and later 1.2.3. Connected records confirm related SQL injection issues in phpVID 1.2.3 via the n parameter (and note that the cat vector is already covered by CVE-2008-4157), ...

Sql injection

SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the weobjectID parameter...

CVE-2008-4154

SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the weobjectID parameter...

CVE-2008-4154

SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the weobjectID parameter...

CVE-2008-4145

SQL injection vulnerability in userreadlinks.php in Addalink 1.0 beta 4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

CVE-2008-4143

SQL injection vulnerability in categorysearch.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4142

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the esid parameter...

CVE-2008-4148

The CVE-2008-4148 vulnerability affects the Drupal Mailhandler module (5.x up to 5.x-1.4; 6.x up to 6.x-1.4). Root cause: SQL queries are constructed without using the Drupal database API, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact and exploit deta...