Vulnerabilities (CVE)

Filtered by CWE-89
Total 14188 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-4974 1 Brotherscripts 1 Auto Dealer 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-5062 1 Mh Products 1 Kleinanzeigenmarkt 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter.
CVE-2010-4992 2 Joomla, Paymentsplus 2 Joomla\!, Payments Plus 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the type parameter to add.html.
CVE-2010-4955 1 Php-programs 1 Apboard Developers Apboard 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078.
CVE-2010-4954 1 Gambio 1 Xt\ 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.
CVE-2010-5023 1 Cramerdev 1 Digital Interchange Calendar 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.
CVE-2011-2403 1 Hp 1 Network Automation 2017-08-29 6.5 MEDIUM N/A
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-4860 1 Galaxyscriptz 1 Myphpauction 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-4916 1 Coldgen 1 Coldusergroup 2017-08-29 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.
CVE-2010-4921 1 Dmxready 1 Polling Booth Manager 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQL commands via the QuestionID parameter in a results action.
CVE-2010-5011 1 Schoolmation 1 Schoolmation 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arbitrary SQL commands via the session parameter.
CVE-2010-4984 1 Mykazaam 1 Notes Management System 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box.
CVE-2010-4915 1 Coldgen 1 Coldbookmarks 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action.
CVE-2010-4869 1 Drbenhur 1 Dbhcms 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter.
CVE-2010-5034 1 Iscripts 1 Easybiller 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands via the planid parameter.
CVE-2010-4808 1 Valarsoft 1 Webmatic 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVE-2010-5061 1 Rsstatic 1 Rsstatic 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in RSStatic allows remote attackers to execute arbitrary SQL commands via the maxarticles parameter.
CVE-2010-5044 2 Joomla, Kanich 2 Joomla\!, Com Searchlog 2017-08-29 6.0 MEDIUM N/A
SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL commands via the search parameter in a log action to administrator/index.php. NOTE: some of these details are obtained from third party information.
CVE-2010-4981 1 Yourfreeworld 1 Banner Management 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.
CVE-2010-4982 1 Mykazaam 1 Address \& Contact Organizer 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in address_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter.