Sql injection

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2123

Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the 1 inUser aka Username and 2 inPass aka Password parameters to a inc/login.ei, reachable through login.php; and the 3 id parameter to b showbug.php and c showactivity.php. NOTE: i...

CVE-2009-2122

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2113

Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 name parameter to player.php and the 2 hash parameter to song.php...

Sql injection

SQL injection vulnerability in house/listingview.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter...

Sql injection

SQL injection vulnerability in the Frontend MP3 Player femp3player 0.2.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-2096

SQL injection vulnerability in house/listingview.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter...

CVE-2009-2106

SQL injection vulnerability in the Virtual Civil Services civserv extension 4.3.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki Catalog aka Smart Catalog allows remote attackers to execute arbitrary SQL commands via the searchtext parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in the iJoomla RSS Feeder comijoomlarss component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php...

CVE-2009-2098

SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2099

SQL injection vulnerability in the iJoomla RSS Feeder comijoomlarss component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php...

CVE-2009-2103

SQL injection vulnerability in the Frontend MP3 Player femp3player 0.2.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-2096

SQL injection vulnerability in house/listingview.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter...

Sql injection

SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-2036

SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in bin/apsbrowsesources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the sourceclass parameter in a browseclasses action...

Sql injection

SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...