CVE-2007-5785: Improper Control of Generation of Code

SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page buildmediacontent.php. NOTE: it was later reported that 0.7.4 is also affected...

CVE-2007-5679: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page buildmediacontent.php. NOTE: it was later reported that 0.7.4 is also affected...

CVE-2007-5678

SQL injection vulnerability in the Music module in phpBasic allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to the default URI...

CVE-2007-5678: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Music module in phpBasic allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to the default URI...

CVE-2007-5630

SQL injection vulnerability in tnews.php in BBsProcesS BBPortalS 1.5.10 through 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a tnews action...

CVE-2007-5630: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tnews.php in BBsProcesS BBPortalS 1.5.10 through 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a tnews action...

Sql injection

SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-5490

SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-5490: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-5417: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in boastMachine aka bMachine 2.8 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Edit.asp in DB Manager 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-5291: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Edit.asp in DB Manager 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-5308: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

Sql injection

SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action...

CVE-2007-5272

SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action...

CVE-2007-5272: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action...

CVE-2007-5233: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a readmore action...

CVE-2007-5122: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in storeinfo.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4979: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a results action, a different module than CVE-2007-4956.2...