CVE-2007-6544: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the lid parameter to 1 brokenfile.php, 2 visit.php, or 3 ratefile.php in modules/mydownloads/; or 4 ratelink.php, 5 modlink.php, or 6 brokenlink.php in modules/mylinks/...

CVE-2007-6266: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the gid parameter to modules/arcade/index.php in a showstats action, or the lid parameter to 2 modules/myalbum/ratephoto.php or 3 modules/mylinks/ratelink.php, differe...