13668 matches found
Sql injection
SQL injection vulnerability in the amoCourse comamocourse component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php...
CVE-2009-2612
SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to delete.php or 2 alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565...
Sql injection
SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-2616
SQL injection vulnerability in zadminlogin.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-2614
The vulnerability CVE-2009-2614 affects DataCheck Solutions LinkPal 1.x, specifically the z_admin_login.asp component. The issue is a SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The available documents confirm the affected product/version ...
CVE-2009-2616
The CVE-2009-2616 vulnerability concerns DataCheck Solutions SitePal 1.x, where a flaw in z_admin_login.asp enables remote execution of arbitrary SQL commands via unspecified vectors. The available sources confirm an SQL injection in the login component but do not specify affected versions beyond...
Sql injection
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...
Sql injection
SQL injection vulnerability in the Joomlaequipment aka JUser or comjuser component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showprofile action to index.php...
CVE-2009-2604
Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...
Sql injection
SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL commands via the seller parameter in a search action...
CVE-2009-2601
SQL injection vulnerability in the Joomlaequipment aka JUser or comjuser component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showprofile action to index.php...
CVE-2009-2603
Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 tid parameters...
CVE-2009-2598
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...
CVE-2009-2599
SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL commands via the seller parameter in a search action...
Sql injection
SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a details action...
CVE-2009-2585
SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a member cookie in an account editprofile action, a different vector than CVE-2009-1731...
CVE-2009-2592
SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mesid parameter...
Sql injection
SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewannonces action to index.php...