Total
15623 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-0565 | 1 Deltascripts | 1 Php Links | 2025-04-09 | 6.8 MEDIUM | N/A |
SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | |||||
CVE-2009-2388 | 1 Shalwan | 1 Opial | 2025-04-09 | 6.8 MEDIUM | N/A |
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | |||||
CVE-2008-1961 | 1 Php Resource | 1 Voice Of Web Allmyguests | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMG_id parameter in a comments action. | |||||
CVE-2008-4093 | 1 Yourownbux | 1 Yourownbux | 2025-04-09 | 6.8 MEDIUM | N/A |
SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. | |||||
CVE-2008-2356 | 1 Archangelmgt | 1 Archangel Weblog | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbitrary SQL commands via the post_id parameter. | |||||
CVE-2008-0762 | 1 Joomla | 1 Com Iomezun | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in the com_iomezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action. | |||||
CVE-2008-1430 | 1 Iatek | 1 Aspapp | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in links.asp in ASPapp allows remote attackers to execute arbitrary SQL commands via the CatId parameter. | |||||
CVE-2009-0111 | 1 Goople Cms | 1 Goople Cms | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. | |||||
CVE-2009-1027 | 1 Opencart | 1 Opencart | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter. | |||||
CVE-2008-3768 | 1 Turnkeywebtools | 1 Sunshop Shopping Cart | 2025-04-09 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an edit_registry action to index.php, (2) a vector involving the check_email function, and other vectors. | |||||
CVE-2008-2792 | 1 Erocms | 1 Erocms | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site parameter. | |||||
CVE-2007-6004 | 1 Toko | 1 Instan | 2025-04-09 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an artikel action or (2) the katid parameter in a produk action. | |||||
CVE-2009-1256 | 1 Flexcms | 1 Flexcms | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information. | |||||
CVE-2008-5817 | 1 Web Scribble Solutions | 1 Webclassifieds | 2025-04-09 | 6.8 MEDIUM | N/A |
Multiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) password fields in a sign_in action. | |||||
CVE-2009-0425 | 1 Blue Eye Cms | 1 Blue Eye Cms | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter. | |||||
CVE-2008-6788 | 1 Minddezign | 1 Photo Gallery | 2025-04-09 | 5.1 MEDIUM | N/A |
SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php. | |||||
CVE-2008-0685 | 1 Itechscripts | 1 Itechclassifieds | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter. | |||||
CVE-2008-4877 | 1 Mywebcards | 1 Webcards | 2025-04-09 | 6.8 MEDIUM | N/A |
SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information. | |||||
CVE-2008-3374 | 1 Gregarius | 1 Gregarius | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the rsargs array parameter in an __exp__getFeedContent action. | |||||
CVE-2009-3505 | 1 Vastal | 1 Mmorpg Zone | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in view_news.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter. NOTE: the game_id vector is already covered by CVE-2008-4460. |