CVE-2009-0420

SQL injection vulnerability in the RD-Autos comrdautos 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2009-0428

SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0428

SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0451: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Admin name field to the default URI under admin/...

Sql injection

SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in 1 optinout.php.inc, 2 confirmation.php.inc, and 3 renewal.php.inc in mailinglist/...

Sql injection

Rejected reason: SQL injection vulnerability in index.php in TinyMCE 2.0.1 allows remote attackers to execute arbitrary SQL commands via the menuID parameter. NOTE: CVE and multiple reliable third parties dispute this issue, since TinyMCE does not contain index.php or any PHP code. This may be an...

Sql injection

SQL injection vulnerability in offlineauth.php in Max.Blog 1.0.6 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the var parameter...

CVE-2009-0401

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0405

SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the var parameter...

Sql injection

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

Sql injection

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-0402

SQL injection vulnerability in client/newaccount.php in Domain Technologie Control DTC before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the 1 familyname, 2 christname, 3 companyname, 4 iscompany, 5 email, 6 phone, 7 fax, 8 addr1, 9 addr2, 10 addr3, 11 zipcode, 12 city,...

Sql injection

SQL injection vulnerability in client/newaccount.php in Domain Technologie Control DTC before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the 1 familyname, 2 christname, 3 companyname, 4 iscompany, 5 email, 6 phone, 7 fax, 8 addr1, 9 addr2, 10 addr3, 11 zipcode, 12 city,...

Sql injection

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-0407

SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-0401

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0402

Domain Technologie Control (DTC) is affected by CVE-2009-0402 due to an SQL injection in client/new_account.php present before version 0.29.16. The vulnerability arises from unsafely inserting input from 15 parameters (familyname, christname, company_name, is_company, email, phone, fax, addr1, ad...