Sql injection

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018...

CVE-2009-3319: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018...

CVE-2009-3252

Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the 1 year and 2 id parameters...

CVE-2009-3246: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL commands via the id parameter in an spnews action to the default URI. NOTE: some of these details are obtained from third party information...

CVE-2009-3252: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the 1 year and 2 id parameters...

CVE-2009-3203

SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3223: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ppc-add-keywords.php in Inout Adserver allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2009-3204: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 demo.php and 2 forum.php, and the PATHINFO to 3 includeforum.php...

CVE-2009-3209: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2009-3205: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewproduct action...

CVE-2009-3203: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3193: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DigiFolio comdigifolio component 1.52 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a project action to index.php...

CVE-2009-3195: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rss.php and 2 search.php...

Sql injection

Multiple SQL injection vulnerabilities in Model Agency Manager PRO formerly Modeling Agency Content Management Script allow remote attackers to execute arbitrary SQL commands via the userid parameter to 1 view.php, 2 photos.php, and 3 motm.php; and the 4 id parameter to forummessage.php...

CVE-2009-3175: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Model Agency Manager PRO formerly Modeling Agency Content Management Script allow remote attackers to execute arbitrary SQL commands via the userid parameter to 1 view.php, 2 photos.php, and 3 motm.php; and the 4 id parameter to forummessage.php...

Sql injection

SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2009-3117: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2009-3120: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-7169: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Jabode horoscope extension comjabode for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a sign task to index.php...

Sql injection

SQL injection vulnerability in wcategory.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...