CVE-2008-2774

SQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter, a different vector than CVE-2007-4736...

CVE-2008-2775

CVE-2008-2775 describes a SQL injection vulnerability in the search.asp page of DT Centrepiece 4.0 where the searchFor parameter can be exploited by remote attackers to execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD/NVD mirror) with a base score of 7....

CVE-2008-2778

SQL injection vulnerability in inc/classsearch.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers to execute arbitrary SQL commands via the search parameter...

Sql injection

SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

Sql injection

SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the list parameter...

CVE-2008-2755

SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2754

SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the list parameter...

Sql injection

SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2008-2760

SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

Sql injection

SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

Sql injection

SQL injection vulnerability in index.php in MycroCMS 0.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the entryid parameter...

Sql injection

SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2008-2753

Multiple SQL injection vulnerabilities in Pooya Site Builder PSB 6.0 allow remote attackers to execute arbitrary SQL commands via the 1 xslIdn parameter to a utils/getXsl.aspx, and the 2 part parameter to b getXml.aspx and c getXls.aspx in utils/...

CVE-2008-2763

SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2008-2755

SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 wantusername parameter to account-signup.php, or the 3 receiver parameter to account-inbox.php in a msg action...

Sql injection

SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the detail parameter...

CVE-2008-2746

SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the detail parameter...

CVE-2008-2746

SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the detail parameter...