CVE-2008-6076: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Daily Message comdailymessage 1.0.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2009-0445

The CVE-2009-0445 issue affects the Dreampics Gallery Builder, specifically the web entry point index.php. The vulnerability is an SQL injection in the gallery.viewPhotos action via the exhibition_id parameter, allowing remote commands execution. Exploitation details are not provided in the docum...

Sql injection

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...

CVE-2008-6064

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...

Sql injection

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter...

CVE-2009-0420: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the RD-Autos comrdautos 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2009-0445: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL commands via the exhibitionid parameter in a gallery.viewPhotos action...

CVE-2008-6064: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...

CVE-2009-0425: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter...

CVE-2009-0423: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Php Photo Album PHPPA 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. dot dot in the preview parameter...

CVE-2009-0425

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter...

CVE-2008-6050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Tech Articles comtecharticle 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the item parameter to index.php...

CVE-2009-0406

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...

CVE-2008-6038

SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...

CVE-2008-6040

Arcadem Pro is affected by a SQL injection in index.php (versions 2.700–2.802). The vulnerability allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, likely due to a flaw in includes/articleblock.php. No remediation or exploit details are provided in the connec...

CVE-2008-6042

SQL injection vulnerability in the research module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php...

CVE-2008-6027: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 whl, 2 var1, and 3 search parameters...

CVE-2008-6038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dspeditevent.php...

CVE-2008-6040: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php...