CVE-2009-0381: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart comprod 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php...

CVE-2008-6016

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6016

Affected product/version: EsFaq 2.0. Vulnerability: SQL injection in questions.php (two related vectors observed: via cid parameter for CVE-2008-6016 and via idcat parameter for CVE-2008-3952). Root cause (per sources): Unparameterized SQL handling in the backend allows remote attackers to inject...

CVE-2008-6016: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-5960

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

Sql injection

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-5961

CVE-2008-5961 is a cross-site scripting (XSS) vulnerability in Tribiq CMS Community versions 5.0.10B and 5.0.11E, exploitable via the cID parameter in a document action on index.php. The issue arises from inadequate input handling that allows an attacker to inject arbitrary script/HTML. Reported ...

CVE-2008-5960: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-5961: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2008-5838: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in searchresults.php in E-Php Scripts E-Shop aka E-Php Shopping Cart Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5777: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in cate.php in Lito Lite CMS, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5636

CVE-2008-5636: SQL injection in Lito Lite CMS (cate.php) when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL via the cid parameter due to insufficient input sanitization in that parameter. Exploitation details are not provided in the connected docu...

CVE-2008-5636: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cate.php in Lito Lite CMS, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5559

CVE-2008-5559 describes a SQL injection vulnerability in the sendcard.cfm component of PostEcards. An attacker can exploit the cid parameter to execute arbitrary SQL commands on the backend database. The NVD entry (CVSSv2 base score 7.5, HIGH) indicates network access with low attack complexity a...

CVE-2008-5559: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter...