CVE-2008-6011

The vulnerability CVE-2008-6011 affects SG Real Estate Portal 2.0, specifically the index.php page where the page_id parameter is used in SQL queries. The underlying root cause is an SQL injection that allows remote attackers to execute arbitrary SQL commands. The vulnerability is categorized wit...

CVE-2008-6015

Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 keywords and 2 cat parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0337

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0327

SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arbitrary SQL commands via the version parameter...

CVE-2009-0334

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action...

CVE-2009-0326

SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 idp parameter to reports/projects.php, the 2 idc parameter to reports/contacts.php, and the 3 idu parameter to reports/users.php...

Sql injection

SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in the PcCookBook compccookbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipeid parameter in a viewrecipe action to index.php, a different vector than CVE-2008-0844...

Sql injection

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in incwebblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via the itemID parameter in a view action...

Sql injection

SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arbitrary SQL commands via the version parameter...

Sql injection

SQL injection vulnerability in the WebAmoeba WA Ticket System comwaticketsystem component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php...

CVE-2009-0324

Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 idp parameter to reports/projects.php, the 2 idc parameter to reports/contacts.php, and the 3 idu parameter to reports/users.php...

CVE-2009-0339

The CVE-2009-0339 entry concerns a SQL injection in inc_webblogmanager.asp of the DMXReady Blog Manager, exploitable via the itemID parameter in a view action. This vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on confidentiality, integrity, and av...

Sql injection

SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...

CVE-2008-6003

SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...

CVE-2008-6003: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...

CVE-2009-0293

SQL injection vulnerability in profileview.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-0296

SQL injection vulnerability in shopdisplayproducts.php in Script Toko Online 5.01 allows remote attackers to execute arbitrary SQL commands via the catid parameter...