Total
15687 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2007-6014 | 1 Beehive Forum | 1 Beehive Forum | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t_dedupe parameter. | |||||
CVE-2007-4736 | 1 Cartkeeper | 1 Ckgold Shopping Cart | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute arbitrary SQL commands via the category_id parameter. | |||||
CVE-2008-6301 | 2 Phpbb, Prezmo | 2 Phpbb, Small Shoutbox | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in shoutbox_view.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action. | |||||
CVE-2008-3649 | 1 Articlefriendly | 1 Article Friendly | 2025-04-09 | 6.8 MEDIUM | N/A |
SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbitrary SQL commands via the Cat parameter. | |||||
CVE-2008-4675 | 1 Phpcounter | 1 Phpcounter | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter. | |||||
CVE-2008-2063 | 1 Joovili | 1 Joovili | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category parameter. | |||||
CVE-2008-5488 | 1 E-topbiz | 1 Domain Shop | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in admin.php in E-topbiz Domain Shop 2 allows remote attackers to execute arbitrary SQL commands via the passfromform parameter. | |||||
CVE-2008-2277 | 1 Cmsnx | 1 Feedback And Rating Script | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary SQL commands via the listingid parameter. | |||||
CVE-2009-4550 | 2 Joomla, Kunena | 2 Joomla\!, Kunena Forum | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in the Kunena Forum (com_kunena) component 1.5.3 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the func parameter to index.php. | |||||
CVE-2009-4046 | 1 Frontaccounting | 1 Frontaccounting | 2025-04-09 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) bank_accounts.php, (2) currencies.php, (3) exchange_rates.php, (4) gl_account_types.php, and (5) gl_accounts.php in gl/manage/; and (6) audit_trail_db.inc, (7) comments_db.inc, (8) inventory_db.inc, (9) manufacturing_db.inc, and (10) references_db.inc in includes/db/. | |||||
CVE-2008-4175 | 1 Linkbidscript | 1 Linkbidscript | 2025-04-09 | 6.5 MEDIUM | N/A |
Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php. | |||||
CVE-2009-1852 | 1 Graphiks | 1 Myforum | 2025-04-09 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields. | |||||
CVE-2008-0880 | 1 Phpnuke | 1 Easycontent Module | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the page_id parameter. | |||||
CVE-2009-0750 | 2 Tombstone, Txtsql | 2 Smnews, Txtsql | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter. | |||||
CVE-2007-6373 | 1 Gestdown | 1 Gestdown | 2025-04-09 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands via the (1) categorie parameter to catdownload.php, or the id parameter to (2) download.php or (3) hitcounter.php. | |||||
CVE-2008-4460 | 1 Vastal I-tech | 1 Mmorpg Zone | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the game_id parameter. | |||||
CVE-2009-0446 | 1 Web-album | 1 Webalbum | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via the id parameter. | |||||
CVE-2008-2498 | 1 Mambo-foundation | 1 Mambo | 2025-04-09 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) articleid and (2) mcname parameters. NOTE: some of these details are obtained from third party information. | |||||
CVE-2008-5069 | 1 Deeserver | 1 Panuwat Promoteweb Mysql | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. | |||||
CVE-2008-0839 | 2 Astats, Joomla | 2 Astatspro, Com Astatspro | 2025-04-09 | 7.5 HIGH | N/A |
SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter. |