Total
14188 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-6179 | 1 Indexscript | 1 Indexscript | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in sug_cat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter, a different vector than CVE-2007-4069. | |||||
CVE-2009-0297 | 1 Clicktech | 1 Clickauction | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL commands via the (1) txtEmail and (2) txtPassword parameters. NOTE: some of these details are obtained from third party information. | |||||
CVE-2008-6642 | 1 Dotcontent | 1 Fluentcms | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL commands via the sid parameter. NOTE: some of these details are obtained from third party information. | |||||
CVE-2008-6488 | 1 Softcomplex | 1 Php Image Gallery | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the Admin field in a login action. | |||||
CVE-2009-0604 | 1 Php Director | 1 Php Director | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the searching parameter. | |||||
CVE-2009-0493 | 1 Martin Unzner | 1 It\!cms | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username. | |||||
CVE-2009-0454 | 1 Dmxready | 1 Online Notebook Manager | 2017-09-29 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field. NOTE: some third parties report inability to verify this issue. | |||||
CVE-2009-0420 | 2 Joomla, Rd-media | 2 Joomla, Rd-autos | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. | |||||
CVE-2009-0381 | 2 Bazaarbuilder, Joomla | 2 Ecommerce Shopping Cart, Joomla | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart (com_prod) 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php. | |||||
CVE-2008-6242 | 1 Scripts-for-sites | 1 Ez E-store | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in SearchResults.php in Scripts For Sites (SFS) EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter. | |||||
CVE-2009-0739 | 1 Frankmancuso | 1 Mynews | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters. | |||||
CVE-2008-6264 | 1 E-topbiz | 1 Slide Popups | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter. | |||||
CVE-2009-0726 | 3 Gigcalendar, Joomla, Mambo | 3 Com Gigcalendar, Joomla, Mambo | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcal_gigs_id parameter in a details action to index.php. | |||||
CVE-2008-6477 | 1 Mumbojumbo | 1 Op4 | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. | |||||
CVE-2008-6324 | 1 Cfmsource | 1 Cf Forum | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter. | |||||
CVE-2008-7114 | 1 Ifusionservices | 1 Ifdate | 2017-09-29 | 6.8 MEDIUM | N/A |
SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the name field. | |||||
CVE-2008-6471 | 1 Mountaingrafix | 1 Easylink | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action. | |||||
CVE-2008-6780 | 1 Scripts-for-sites | 1 Ez Affiliate | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. | |||||
CVE-2009-0750 | 2 Tombstone, Txtsql | 2 Smnews, Txtsql | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter. | |||||
CVE-2008-6414 | 1 Aj Square | 1 Aj Auction | 2017-09-29 | 7.5 HIGH | N/A |
SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the item_id parameter. |