CVE-2009-4424

SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4424: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

UBUNTU-CVE-2009-3582

Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the 1 id and possibly 2 db parameters in a Delete action to the output of a VendorsReportsSearch search operation...

CVE-2009-3582: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the 1 id and possibly 2 db parameters in a Delete action to the output of a VendorsReportsSearch search operation...

CVE-2009-4360: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/content/index.php in the Content module 0.5 for XOOPS allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Sql injection

SQL injection vulnerability in the Itamar Elharar MusicGallery commusicgallery component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an itempage action to index.php. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2009-4217: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Itamar Elharar MusicGallery commusicgallery component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an itempage action to index.php. NOTE: the provenance of this information is unknown; the details are obtained...

Sql injection

SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in the osnews module in Open-school OS 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to index.php...

CVE-2009-4204

SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4206

SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4208: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the osnews module in Open-school OS 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to index.php...

CVE-2009-4204: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4200: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Seminar comseminar component 1.28 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a Viewseminar action to index.php...

CVE-2009-4206: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4155

Multiple SQL injection vulnerabilities in Eshopbuilde CMS allow remote attackers to execute arbitrary SQL commands via the sitebid parameter to 1 home-f.asp and 2 opinions-f.asp; 3 sitebid, 4 id, 5 secText, 6 client-ip, and 7 Gid parameters to more-f.asp; 8 sitebid, 9 id, 10 maid, 11 miid, 12...

CVE-2009-4174: Undefined Security Weakness

The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magicquotesgpc is disabled, allows remote authenticated users with Journalist or Editor access to bypass administrative moderation and edit previously submitted articles via a modified id parameter in a doeditnews...

CVE-2009-4057: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php, 2 cateid parameter to category.php, 3 id parameter to news.php, and 4 productid parameter to itechd.php. NOTE: the sellersothersitem.php,...

Sql injection

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629...