166 matches found
CVE-2004-1821
SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter...
TYPO3 Security Bulletin
An issue has been reported where a bug in the "cmwlinklist" extension allows SQL injection attacks. In specific situations, a remote offender can cause malicious database operations. Component Type: Third Party Extension. This extension is third party code that has not been submitted to the TYPO3...
CVE-2002-1110
Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magicquotesgpc enabled, allows remote attackers to gain privileges or perform unauthorized database operations via modified form fields, e.g. to accountupdate.php...
CVE-2002-0999
CARE 2002 is affected by multiple SQL injection vulnerabilities in versions before beta 1.0.02, allowing remote attackers to perform unauthorized database operations. The root cause is SQL injection in CARE 2002 prior to 1.0.02. Impact, as described in sources, includes unauthorized database mani...