CVE-2007-6586: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sezionenews.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a sezione page action to index.php...

CVE-2007-6578: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6556: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to default.asp in a news page action or 2 the pageid parameter to default.asp...

CVE-2007-6551: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showMsg.php in MailMachine Pro 2.2.4, and other versions before 2.2.6, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6543: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6538

SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6538: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6462

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6462

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6462: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6462

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6391

SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6391

SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6391: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6393: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode...

CVE-2007-6394: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL commands via the id parameter in an expand action...

CVE-2007-6323: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a .. dot dot in the id parameter to 1 getimage.php or 2 getfile.php in mmstemplate/...

CVE-2007-6292

SQL injection vulnerability in leggicommenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6292: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in leggicommenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...