Sql injection

SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the imageid parameter...

Sql injection

SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access CUA 4.04735.p4 allows remote attackers to execute arbitrary SQL commands via the user user name field...

CVE-2008-3366

SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774...

Sql injection

SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774...

Sql injection

SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the rsargs array parameter in an expgetFeedContent action...

CVE-2008-3378

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2008-3372

SQL injection vulnerability in searchform.php in Getacoder Clone allows remote attackers to execute arbitrary SQL commands via the sbprotype parameter...

CVE-2008-3374

CVE-2008-3374 afects Gregarius up to version 0.5.4: an SQL injection in ajax.php via the rsargs array in the __exp__getFeedContent action. This allows an unauthenticated, remote attacker to manipulate database queries in the application and potentially disclose data. The vulnerability is triggere...

CVE-2008-3374

SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the rsargs array parameter in an expgetFeedContent action...

CVE-2008-3378

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2008-3366

CVE-2008-3366 is a SQL injection vulnerability affecting Pligg CMS Beta 9.9.0 where the id parameter in story.php can be exploited to execute arbitrary SQL commands. The issue is documented in multiple feeds (NVD/NIST entry and CVE records) and is potentially related to CVE-2008-1774 (editlink.ph...

Sql injection

SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-3359

SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

Sql injection

SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a Singer action...

CVE-2008-3351

SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execute arbitrary SQL commands via the photoId parameter in a show action...

Sql injection

SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

CVE-2008-3355

CVE-2008-3355 : SQL injection in sitemap.xml.php of Camera Life 2.6.2 (and related builds) allows remote attackers to execute arbitrary SQL via the id parameter in a photos action. Public references (e.g., Exploit-DB) indicate available exploit information. The affected version is listed as Camer...

CVE-2008-3351

SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execute arbitrary SQL commands via the photoId parameter in a show action...

Sql injection

SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr trial edition allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action...

CVE-2008-3345

SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action...