CVE-2010-2720: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-2719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2687

SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter...

Sql injection

SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter...

CVE-2010-2684

SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2688

CVE-2010-2688 refers to a SQL injection in Site2Nite Boat Classifieds, specifically in detail.asp, exploitable via the ID parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, with impacts described as partial confidentiality/integrity/availability. The OpenVAS e...

CVE-2010-2687

SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter...

CVE-2010-2684: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2687: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter...

CVE-2010-2690: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JOOFORGE Gamesbox comgamesbox component 1.0.2, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a consoles action to index.php...

CVE-2009-4926: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Online Contact Manager formerly EContact PRO 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showGroup parameter to a index.php and the 2 id parameter to b view.php, c email.php, d edit.php, and e delete.php...

CVE-2010-2688: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-2670

SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2674

SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an articolo action...

CVE-2010-2675

Cross-site scripting XSS vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an articolo action...

Sql injection

SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an articolo action...

CVE-2010-2673

SQL injection vulnerability in profileview.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2674

SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an articolo action...

CVE-2010-2673: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profileview.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...