CVE-2004-2695: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Authorize.net callback code subscriptions/authorize.php in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the xinvoicenum parameter. NOTE: this issue might be related to CVE-2006-4267...

CVE-2006-4267: Undefined Security Weakness

Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 oid parameter in modules/gateway/Protx/confirmed.php and the 2 xinvoicenum parameter in modules/gateway/Authorize/confirmed.php...

vBulletin authorize.php x_invoice_num Parameter SQL Injection

Binary data 2294.prm...