CVE-2008-6457

SQL injection vulnerability in the Swigmore institute cgswigmore extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6464

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6462

SQL injection vulnerability in the My quiz and poll myquizpoll extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6468

SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a browse action...

CVE-2008-6467

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

CVE-2008-6456: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the HBook hbook extension 2.3.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6459: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the auto BE User Registration autobeuser extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6462: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the My quiz and poll myquizpoll extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6461: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Random Prayer 2 steprayer2 extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6463: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Diocese of Portsmouth Church Search pdchurchsearch extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension for TYPO3, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-0882

Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to showtheme.php and the 2 user parameter to userinfo.php...

CVE-2009-0881

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0883

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...

Sql injection

Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to showtheme.php and the 2 user parameter to userinfo.php...

Sql injection

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...

Sql injection

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0881

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0882

CVE-2009-0882 corresponds to multiple SQL injection vulnerabilities in nForum 1.5. The affected components are the PHP scripts showtheme.php (id parameter) and userinfo.php (user parameter), with root cause described as insufficient input sanitization in SQL queries. Impact per sources indicates ...

CVE-2009-0883

SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...

GLSA-200903-25 : Courier Authentication Library: SQL Injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200903-25 Courier Authentication Library: SQL Injection vulnerability It has been reported that some parameters used in SQL queries are not properly sanitized before being processed when using a non-Latin locale Postgres database...