13321 matches found
CVE-2008-3213
SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information...
CVE-2008-3206
SQL injection vulnerability in browse.groups.php in Yuhhu Pubs Black Cat allows remote attackers to execute arbitrary SQL commands via the category parameter...
CVE-2008-3204
SQL injection vulnerability in topstop.php in E-topbiz Million Pixels 3 allows remote attackers to execute arbitrary SQL commands via the idcat parameter...
CVE-2008-3200
SQL injection vulnerability in vlcforum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affichmessage action...
Sql injection
SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 City, 2 Interest, 3 Email, 4 Icq, 5 msn, or 6 Yahoo Messenger field in an editprofile action...
CVE-2008-3193
SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...
CVE-2008-3191
Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 City, 2 Interest, 3 Email, 4 Icq, 5 msn, or 6 Yahoo Messenger field in an editprofile action...
Sql injection
SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...
CVE-2008-3191
Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 City, 2 Interest, 3 Email, 4 Icq, 5 msn, or 6 Yahoo Messenger field in an editprofile action...
CVE-2008-3189
SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3193
SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...
CVE-2008-3193
CVE-2008-3193 describes a SQL injection vulnerability in jSite 1.0 OE . An attacker can trigger arbitrary SQL commands by manipulating the page parameter of the default URI, enabling remote execution without authentication (per CVSS 2.0: AV:N/AC:L/Au:N/C:P/I:P/A:P). The connected records corrobor...
CVE-2008-3185
Relative Real Estate Systems 3.0 and earlier are affected by an SQL injection in index.php, exploitable via the listing_id parameter in a listings action. Remote attackers can execute arbitrary SQL commands as described in CVE-2008-3185 records (NVD, CVE list). The connected documents provide vul...
Sql injection
SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary SQL commands via the idDirectory parameter...
Sql injection
SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter...
Sql injection
SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showdvd action...
CVE-2008-3152
SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary SQL commands via the idDirectory parameter...