9762 matches found
CVE-2008-0678: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...
CVE-2008-0677: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news action...
CVE-2008-0653: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the Ynews comynews 1.0.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showYNews action...
CVE-2008-0611: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-0565
CVE-2008-0565 concerns a SQL injection in DeltaScripts PHP Links 1.3 and earlier, exploitable via the id parameter in vote.php. The vulnerability is documented with affected software and root cause: unsafely constructed SQL in vote.php allows remote SQL command execution. The available connected ...
CVE-2008-0565: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in index.php in the Arthur Konze AkoGallery comakogallery 2.5 beta component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...
CVE-2008-0562
SQL injection vulnerability in index.php in the Restaurant comrestaurant 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...
CVE-2008-0561: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the Arthur Konze AkoGallery comakogallery 2.5 beta component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...
CVE-2008-0557: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the CatalogShop comcatalogshop 1.0b1 componenent for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...
CVE-2008-0562: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the Restaurant comrestaurant 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...
CVE-2008-0538: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL commands via the 1 password parameter to login.php, the 2 id parameter to display.php, and unspecified other vectors. NOTE: some of these details are obtained from third party...
CVE-2008-0507: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-0518: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the Recipes comrecipes 1.00 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...
CVE-2008-0490
SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-0490: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...
WordPress AdServe 'adclick.php' 'id' Parameter SQL Injection
The remote host is running AdServe, a third-party ad banner plugin for WordPress. The version of AdServe installed on the remote host fails to sanitize input to the 'id' parameter of the 'adclick.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' setting, an...
Sql injection
SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-0468: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-0446: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...