Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-89
Total 9311 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-3599 1 Openimpro 1 Openimpro 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3601 1 Quicksilver Forums 1 Quicksilver Forums 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL commands via the forums array parameter in a search action.
CVE-2008-3603 1 Vacation Rentals 1 Vacation Rental Script 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sections action.
CVE-2008-3649 1 Articlefriendly 1 Article Friendly 2017-09-28 6.8 MEDIUM N/A
SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbitrary SQL commands via the Cat parameter.
CVE-2008-3669 1 Zeescripts 1 Zeereviews 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (aka ZeeReviews) allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
CVE-2008-3670 1 Articlefriendly 1 Article Friendly 2017-09-28 6.8 MEDIUM N/A
SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQL commands via the autid parameter.
CVE-2008-3673 1 Pozscripts 1 Classified Ads 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3672.
CVE-2008-3674 1 Pozscripts 1 Tubeguru Video Sharing Script 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execute arbitrary SQL commands via the UID parameter.
CVE-2008-3706 1 Zeeways 1 Zeejobsite 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter.
CVE-2008-3711 1 Phparcadescript 1 Phparcadescript 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in index.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a browse action.
CVE-2008-3713 1 Phpbasket 1 Phpbasket 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the pro_id parameter.
CVE-2008-3718 1 Cyberbb 1 Cyberbb 2017-09-28 6.5 MEDIUM N/A
Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) id parameter to show_topic.php and the (2) user parameter to profile.php.
CVE-2008-3719 1 Scripts-for-sites 1 Affiliate Directory 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL commands via the id parameter in a deadlink action.
CVE-2008-3720 1 Deeemm 1 Dmcms 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the id vector is already covered by CVE-2007-5679.
CVE-2008-3725 1 Yourfreeworld 1 Ad Board Script 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3748 1 Lbstone 2 Active Php Bookmarks, Apb 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3749 1 Yourfreeworld 1 Banner Management Script 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3750 1 Yourfreeworld 1 Url Rotator Script 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3751 1 Yourfreeworld 1 Short Url And Url Tracker Script 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3755 1 Yourfreeworld 1 Classifieds 2017-09-28 7.5 HIGH N/A
SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary SQL commands via the category parameter.