CVE-2008-6697

SQL injection vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Sql injection

SQL injection vulnerability in Diocese of Portsmouth Calendar Today pdcalendartoday extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6693

SQL injection vulnerability in Download system sbdownloader extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6697

SQL injection vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6695

CVE-2008-6695 affects the TIMTAB social bookmark icons (timtab_sociable) TYPO3 extension (versions 2.0.4 and earlier). The root cause is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unknown vectors. Impact is high priority (remote access with p...

CVE-2008-6689

SQL injection vulnerability in JobControl dmmjobcontrol 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6695

SQL injection vulnerability in TIMTAB social bookmark icons timtabsociable 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6695: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in TIMTAB social bookmark icons timtabsociable 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6697: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6691: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Diocese of Portsmouth Calendar Today pdcalendartoday extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6689: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in JobControl dmmjobcontrol 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6694: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Random Prayer steprayer 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6686: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CoolURI cooluri 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6693: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Download system sbdownloader extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6696: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Fussballtippspiel toto 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-1277

SQL injection vulnerability in index.php in Gravity Board X GBX 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the memberid parameter in a viewprofile action. NOTE: the boardid issue is already covered by CVE-2008-2996.2...

Sql injection

SQL injection vulnerability in index.php in Gravity Board X GBX 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the memberid parameter in a viewprofile action. NOTE: the boardid issue is already covered by CVE-2008-2996.2...

CVE-2009-1282

SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the glfsession cookie parameter...

CVE-2008-6678

SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp...

CVE-2008-6663

PHPAuctions.info/PHPAuctionSystem shows a SQL injection vulnerability in profile.php. The affected component is the profile handling (profile.php) with input via auction_id (and related CVE entries also cite user_id). The root cause is improper handling of input leading to arbitrary SQL execution...