CVE-2008-4744: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in productdetail.php in DXShopCart 4.30mc allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2008-3594

SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Edition, and E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2008-3594: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Edition, and E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2008-3497: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pages.php in MyPHP CMS 0.3.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

Sql injection

SQL injection vulnerability in Comsenz EPShop aka ECShop before 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a 1 proshow or 2 disppro action to the default URI...

CVE-2008-3412: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Comsenz EPShop aka ECShop before 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a 1 proshow or 2 disppro action to the default URI...

CVE-2008-3346

SQL injection vulnerability in productdetail.php in ShopCart DX allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2008-3346

SQL injection vulnerability in productdetail.php in ShopCart DX allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2008-3346

CVE-2008-3346: SQL injection in ShopCart DX, vulnerability in product_detail.php via the pid parameter that allows remote execution of arbitrary SQL commands. Affected component is ShopCart DX; root cause is improper input handling in pid parameter leading to SQL injection. Impact described as ar...

CVE-2008-3346: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in productdetail.php in ShopCart DX allows remote attackers to execute arbitrary SQL commands via the pid parameter...

Sql injection

SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter...

CVE-2008-2509

SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter...

CVE-2008-2509: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter...

CVE-2008-2340

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 lang parameter to a advsearch.php, b archive.php, and c index.php, and the 2 pid parameter to d listtagitems.php...

CVE-2008-2340

CVE-2008-2340 affects News Manager 2.0 with multiple SQL injection vulnerabilities. Remote attackers can exploit the (1) lang parameter in advsearch.php, archive.php, and index.php, and the (2) pid parameter in list_tagitems.php to execute arbitrary SQL commands. The entry is documented with a hi...

Sql injection

SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a pdetails action...

CVE-2008-2278: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a pdetails action...

Sql injection

SQL injection vulnerability in index.php in Online Rent aka Online Rental Property Script 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it was later reported that 5.0 and earlier are also affected...

CVE-2008-2190: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Online Rent aka Online Rental Property Script 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it was later reported that 5.0 and earlier are also affected...

Sql injection

SQL injection vulnerability in the comsg component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the pid parameter in an order task...