CVE-2008-6086: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355...

CVE-2008-6078: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in open.php in the Private Messaging comprivmsg component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php...

CVE-2008-6081: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6076: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Daily Message comdailymessage 1.0.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2009-0420: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the RD-Autos comrdautos 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2009-0446: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to emailrecipe.aspx, 2 id parameter to recipedetail.aspx, and the 3 catid parameter to validatefieldlength.aspx...

CVE-2009-0406

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...

CVE-2008-6026

SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6033

SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6038

SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...

CVE-2009-0406: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6033: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6026: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6032: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6031: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it was later reported that 2.34 is also vulnerable...

CVE-2008-6038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...

CVE-2009-0384: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in autor.php in OwnRS CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...