CVE-2008-5574

SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL commands via the u parameter...

Sql injection

SQL injection vulnerability in featuredarticle.php in AJ Article 1.0 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a search detail action...

CVE-2008-4613

SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

CVE-2008-4173

SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI...

CVE-2008-3092: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade compuarcade component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gid parameter to index.php...

CVE-2008-1639

Vulnerability (CVE-2008-1639) in Neat weblog 0.2: an SQL injection flaw in index.php allows remote attackers to modify or retrieve data via the articleId parameter in the show action, likely linked to the showArticle function in lib/lib_article.include.php. The NVD entry records a CVSS v2 base sc...

CVE-2008-0326

The CVE-2008-0326 entry describes an SQL injection in FaScript FaPersianHack 1.0, specifically in class/show.php where the id parameter is the attack surface. Multiple sources (NVD and CVE records) confirm the vulnerability, with a CVSSv2 base score of 7.5 (HIGH) and impact on confidentiality, in...

Sql injection

SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI...

CVE-2007-6342

SQL injection vulnerability in the David Castro AuthCAS module AuthCAS.pm 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSIONCOOKIENAME session ID in a cookie...

CVE-2007-4084

Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via 1 the pgmid parameter in an uploadProducts action to merchants/index.php and possibly 2 the rowid parameter to merchants/temp.php...

CVE-2007-3013: Undefined Security Weakness

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picturerealedit.asp, and probably other unspecified vectors...

Sql injection

SQL injection vulnerability in inc/classusers.php in RevokeSoft RevokeBB 1.0 RC4 and earlier allows remote attackers to execute arbitrary SQL commands via the revokebbuser cookie...

Sql injection

SQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the editcomment parameter, a different version and vector than CVE-2006-2862...

CVE-2007-2599

TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier contains multiple SQL injection vulnerabilities. The affected components include (1) catFile parameter for browseCat.php and browseSubCat.php, (2) id parameter for openTutorial.php, topFrame.php, and admin/editListing.php, and (3) the search ...

CVE-2007-2537: Undefined Security Weakness

Multiple SQL injection vulnerabilities in mainfile.php in NPDS 5.10 and earlier allow remote authenticated users to execute arbitrary SQL commands via a 1 nickname or 2 Id in a cookie, or 3 the X-Forwarded-For XFORWARDEDFOR HTTP header...

CVE-2006-3963

Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via the 1 sitename parameter to a signup.php, and the 2 id, 3 deleteuserbanner, 4 viewmem, 5 viewmemunb, 6 viewunmem,or 7 deleteuser parameters to b admin.php...

CVE-2006-3884

Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 offset and 2 limit parameters, 3 newdays parameter in a new action, and the 4 linkid parameter in a deadlink action. NOTE: this issue can also be used...

CVE-2006-3884

CVE-2006-3884 affects Gonafish LinksCaffe 3.0, specifically the PHP file links.php. The vulnerability arises from SQL injection via four parameters: (1) offset, (2) limit, (3) newdays in the new action, and (4) link_id in the deadlink action. Exploitation could allow remote attackers to modify th...

CVE-2006-2862

SQL injection vulnerability in viewimage.php in Particle Gallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the imageid parameter...