CVE-2008-4378: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4374: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the id parameter in a playgame action...

CVE-2008-4379: Improper Neutralization of Special Elements used in an SQL Command

Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2008-4357

SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4355

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum aka PHP Forum or pForum 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4364: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the 1 id parameter in the "page" page and 2 txtSearch parameter in the "Search" page...

CVE-2008-4355: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum aka PHP Forum or pForum 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4348: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4349: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 page parameter in a details action...

CVE-2008-4357: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4150

SQL injection vulnerability in picturecategory.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763...

Sql injection

SQL injection vulnerability in picturecategory.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763...

Sql injection

Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 ucat parameter to upgrade.php and the 2 id parameter to linkadmin/edit.php...

CVE-2008-4185: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213...

CVE-2008-4178: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4175: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 ucat parameter to upgrade.php and the 2 id parameter to linkadmin/edit.php...

CVE-2008-4156: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in print.php in CustomCms CCMS Gaming Portal 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4150: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in picturecategory.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763...

CVE-2008-4143: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in categorysearch.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...