Vulnerabilities (CVE)

Filtered by CWE-89
Total 14188 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-1865 1 Csphere 1 Clansphere 2017-08-17 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the IP address to the cs_getip function in generate.php in the Captcha module, or (2) the s_email parameter to the cs_sql_select function in the MySQL database driver (mysql.php).
CVE-2010-2906 2 Brotherscripts, Scriptsfeed 2 Scripts Directory, Scripts Directory 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-2905.
CVE-2010-1327 1 Tornadostore 1 Tornadostore 2017-08-17 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the marca parameter to precios.php3 or (2) the where parameter in a delivery_courier action to control/abm_list.php3.
CVE-2010-2670 1 Brotherscripts 1 Recipe Website 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-2462 1 Tomacero 1 Orohyip 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in withdraw_money.php in Toma Cero OroHYIP allows remote attackers to execute arbitrary SQL commands via the id parameter in a cancel action.
CVE-2010-1877 2 Joomla, Jtmreseller 2 Joomla\!, Com Jtm 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter in a search action to index.php.
CVE-2010-2461 1 Jce-tech 1 Overstock Script 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter.
CVE-2010-1047 1 Masa2el 1 Music City 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a singer action.
CVE-2010-0672 1 Webmastersite 1 Wsn Guest 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter.
CVE-2010-0720 1 Systemsoftware 1 Erotik Auktionshaus 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-2438 1 Laubrotel 1 G.cms Generator 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php.
CVE-2010-1363 2 Extremejoomla, Joomla 2 Com J-projects, Joomla\! 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the project parameter in a projects action to index.php.
CVE-2010-1271 1 Smart-plugs 1 Smartplugs 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter.
CVE-2010-1726 1 Alibabaclone 1 Ec21 Clone 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-1027 2 Dietmar Schffer, Typo3 2 Travelmate, Typo3 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in the Meet Travelmates (travelmate) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-2924 2 Silvercover, Wordpress 2 Mylinksdump Plugin, Wordpress 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the url parameter. NOTE: some of these details are obtained from third party information.
CVE-2010-0701 1 Newgensoft 1 Omnidocs 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-1073 2 Joomla, Joshprakash 2 Joomla\!, Com Jembed 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in the jEmbed-Embed Anything (com_jembed) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a summary action to index.php.
CVE-2010-1741 1 Billwerx 1 Billwerx Rc 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in request_account.php in Billwerx RC 5.2.2 PL2 allows remote attackers to execute arbitrary SQL commands via the primary_number parameter.
CVE-2010-0753 2 Componentslab, Joomla 2 Com Sqlreport, Joomla\! 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in the SQL Reports (com_sqlreport) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter to ajax/print.php. NOTE: some of these details are obtained from third party information.