9762 matches found
CVE-2008-6358
SQL injection vulnerability in groupindex.php in Social Groupie allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6349: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in surveyresultstext.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6378: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in calendarEventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2008-6372: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information...
CVE-2008-6358: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in groupindex.php in Social Groupie allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6362: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6392: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6386: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-6379: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
Sql injection
SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6328
SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6314: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in tagboard.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
CVE-2008-6328: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6301: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
CVE-2008-6268
SQL injection vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6281: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6268: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in track.php in Scripts For Sites SFS EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter...