CVE-2009-3973

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629...

CVE-2009-3973

The CVE relates to a SQL injection in index.php of Turnkey Arcade Script. The vulnerability is triggered via the id parameter in actions (play or browse) and allows remote attackers to execute arbitrary SQL commands, reflecting a classic server-side injectable vector. The connected data confirms ...

CVE-2009-3967: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3973: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629...

CVE-2009-3754

Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to modules/bms/invoicesdiscountajax.php, 2 f parameter to dbgraphic.php, and 3 tid parameter in a show action to advancedsearch.php...

CVE-2009-3661: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the DJ-Catalog comdjcatalog component for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a showItem action and 2 cid parameter in a show action to index.php...

PT-2009-5921 · Power · Power Bulletin Board

Name of the Vulnerable Software and Affected Versions: Power Bulletin Board versions 2.0.2 and earlier Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in a "new topic" action. This occurs in the forums/index.php file...

CVE-2009-3649: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in forums/index.php in Power Bulletin Board PBBoard 2.0.2 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a newtopic action...

CVE-2009-3593: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to placebid.php and 2 jobid parameter to postresume.php...

CVE-2009-3531: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in offersbuy.php in Alibaba Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3497

SQL injection vulnerability in viewlisting.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3497: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewlisting.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3504: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in offersbuy.php in Alibaba Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3438

SQL injection vulnerability in the JoomlaFacebook comfacebook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a student action to index.php...

CVE-2009-3438

SQL injection vulnerability in the JoomlaFacebook comfacebook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a student action to index.php...

CVE-2009-3438: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JoomlaFacebook comfacebook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a student action to index.php...

CVE-2009-3418: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow 1 remote authenticated users to execute arbitrary SQL commands via the m parameter to manager/index.php and 2 remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an editlink action to...

CVE-2009-3362: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

CVE-2009-3313

Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to 1 index.php and 2 editComments.php, and 3 allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action ...