CVE-2008-2629

SQL injection vulnerability in the LifeType formerly pLog module for Drupal allows remote attackers to execute arbitrary SQL commands via the albumId parameter in a ViewAlbum action to index.php...

CVE-2008-2630

SQL injection vulnerability in the JooBlog comjb2 component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter in a category action to index.php...

CVE-2008-2626

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter...

Insanely Simple Blog 0.5 - SQL Injection

Insanely Simple Blog 0.5 - SQL Injection / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title...

CVE-2008-2629

SQL injection vulnerability in the LifeType formerly pLog module for Drupal allows remote attackers to execute arbitrary SQL commands via the albumId parameter in a ViewAlbum action to index.php...

Sql injection

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter...

Sql injection

SQL injection vulnerability in the Simple Shop Galore comsimpleshop component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php...

CVE-2008-2560

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter...

CVE-2008-2565

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.php and 2 edit.php. NOTE: it was later reported that 4.0.x is also affected...

Sql injection

SQL injection vulnerability in the EasyBook comeasybook component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a deleteentry action to index.php...

Sql injection

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...

CVE-2008-2568

SQL injection vulnerability in the Simple Shop Galore comsimpleshop component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php...

CVE-2008-2572

CVE-2008-2572 describes a SQL injection in FlashBlog’s php/leer_comentarios.php, exploitable via the articulo_id parameter. The issue is a web-remote injection in a PHP script, leading to arbitrary SQL execution. The vulnerability is documented with a CVSS v2 base score of 7.5 (HIGH), indicating ...

CVE-2008-2572

SQL injection vulnerability in php/leercomentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL commands via the articuloid parameter...

CVE-2008-2562

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...

CVE-2008-2560

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter...

Sql injection

SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via the mid parameter...

Sql injection

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...

Sql injection

Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp and 2 cat parameter to templatearchivescat.asp...

CVE-2008-2556

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...