Sql injection

SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter...

CVE-2008-6209

SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-6210

SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL commands via the imgid parameter in the gallerypic page...

CVE-2008-6202

SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 urun.asp, 2 admin/bayilistele.asp, 3 admin/urungruplistele.asp, and 4 admin/urunlistele.asp...

CVE-2008-6204

Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to secure/admin/guncelle.asp, 2 kulad and sifre parameters to secure/admin/giris.asp, and 3 username and password to secure/admin/default.asp...

Sql injection

SQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 urun.asp, 2 admin/bayilistele.asp, 3 admin/urungruplistele.asp, and 4 admin/urunlistele.asp...

Sql injection

SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL commands via the imgid parameter in the gallerypic page...

Sql injection

Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to secure/admin/guncelle.asp, 2 kulad and sifre parameters to secure/admin/giris.asp, and 3 username and password to secure/admin/default.asp...

CVE-2008-6202

Summary: CVE-2008-6202 describes a SQL injection vulnerability in CoBaLT 1.0 . The flaw allows remote attackers to execute arbitrary SQL commands through the id parameter on four endpoints: urun.asp, admin/bayi_listele.asp, admin/urun_grup_listele.asp, and admin/urun_listele.asp. The CVSS metrics...

CVE-2008-6204

CVE-2008-6204 concerns multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier. The affected components are the web admin endpoints: secure/admin/guncelle.asp (id parameter), secure/admin/giris.asp (kulad and sifre), and secure/admin/default.asp (username and password). The underl...

CVE-2008-6209

SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-6204

Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to secure/admin/guncelle.asp, 2 kulad and sifre parameters to secure/admin/giris.asp, and 3 username and password to secure/admin/default.asp...

CVE-2008-6198

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in the OwnBiblio comownbiblio component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalogue action to index.php...

Sql injection

SQL injection vulnerability in sugcat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parentid parameter, a different vector than CVE-2007-4069...

Sql injection

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to 1 new/index.php, 2 news/index.php, and 3 top/topusers.php, which is not properly handled in database-pgsql.php...

CVE-2008-6180

SQL injection vulnerability in system/nlbuser.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie...