Lucene search
+L

9762 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/12 12:00 a.m.•7 views

CVE-2008-0678: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...

6.8CVSS6.4AI score0.00939EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/12 12:00 a.m.•8 views

CVE-2008-0677: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news action...

7.5CVSS6.4AI score0.00928EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/07 12:00 a.m.•6 views

CVE-2008-0653: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Ynews comynews 1.0.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showYNews action...

7.5CVSS6.4AI score0.00928EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/06 12:00 a.m.•5 views

CVE-2008-0611: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.00928EPSS
SaveExploits1References2
CVE
CVE
•added 2008/02/05 1:00 a.m.•65 views

CVE-2008-0565

CVE-2008-0565 concerns a SQL injection in DeltaScripts PHP Links 1.3 and earlier, exploitable via the id parameter in vote.php. The vulnerability is documented with affected software and root cause: unsafely constructed SQL in vote.php allows remote SQL command execution. The available connected ...

6.8CVSS8.5AI score0.01059EPSS
SaveExploits3References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/05 12:00 a.m.•7 views

CVE-2008-0565: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

6.8CVSS6.4AI score0.01059EPSS
SaveExploits3References2
Prion
Prion
•added 2008/02/04 11:00 p.m.•25 views

Sql injection

SQL injection vulnerability in index.php in the Arthur Konze AkoGallery comakogallery 2.5 beta component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

7.5CVSS9AI score0.01103EPSS
SaveExploits2References3Affected Software1
NVD
NVD
•added 2008/02/04 11:00 p.m.•28 views

CVE-2008-0562

SQL injection vulnerability in index.php in the Restaurant comrestaurant 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

7.5CVSS8.2AI score0.01103EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/04 12:00 a.m.•6 views

CVE-2008-0561: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Arthur Konze AkoGallery comakogallery 2.5 beta component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

7.5CVSS6.4AI score0.01103EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/04 12:00 a.m.•7 views

CVE-2008-0557: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the CatalogShop comcatalogshop 1.0b1 componenent for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

7.5CVSS6.4AI score0.0114EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/04 12:00 a.m.•4 views

CVE-2008-0562: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Restaurant comrestaurant 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

7.5CVSS6.4AI score0.01103EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/01 12:00 a.m.•5 views

CVE-2008-0538: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL commands via the 1 password parameter to login.php, the 2 id parameter to display.php, and unspecified other vectors. NOTE: some of these details are obtained from third party...

6.8CVSS6.5AI score0.0116EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/31 12:00 a.m.•6 views

CVE-2008-0507: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.02742EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/31 12:00 a.m.•5 views

CVE-2008-0518: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Recipes comrecipes 1.00 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

7.5CVSS6.4AI score0.0101EPSS
SaveExploits1References2
NVD
NVD
•added 2008/01/30 10:00 p.m.•27 views

CVE-2008-0490

SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.5AI score0.02742EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/30 12:00 a.m.•7 views

CVE-2008-0490: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.02742EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2008/01/30 12:00 a.m.•13569 views

WordPress AdServe 'adclick.php' 'id' Parameter SQL Injection

The remote host is running AdServe, a third-party ad banner plugin for WordPress. The version of AdServe installed on the remote host fails to sanitize input to the 'id' parameter of the 'adclick.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' setting, an...

7.5CVSS5.6AI score0.02742EPSS
SaveExploits2References2
Prion
Prion
•added 2008/01/29 8:00 p.m.•19 views

Sql injection

SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.0101EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/29 12:00 a.m.•5 views

CVE-2008-0468: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.0101EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/24 12:00 a.m.•7 views

CVE-2008-0446: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.00999EPSS
SaveExploits1References2
Rows per page
Query Builder