CVE-2008-2096

SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the catid parameter to a site-specific component name such as link.php or backlinkspider.php...

CVE-2008-1936

SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the catid parameter in an add action. NOTE: this issue might be site-specific...

Sql injection

SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: this issue might be site-specific...

Sql injection

SQL injection vulnerability in the comdetail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE...

Cross site scripting

Cross-site scripting XSS vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormValprofile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability...