Total
9311 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-2860 | 1 Aj Square | 1 Aj Auction | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter. | |||||
CVE-2008-2866 | 1 Caupo.net | 1 Cauposhop Classic | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in csc_article_details.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL commands via the saArticle[ID] parameter. | |||||
CVE-2008-2865 | 1 Kalptaru Infotech | 1 Php Site Lock | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a show_article action. | |||||
CVE-2008-2867 | 1 E-topbiz | 1 Viral Dx 1 | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter. | |||||
CVE-2008-2868 | 1 Duware | 1 Ducalendar | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the iEve parameter. | |||||
CVE-2008-2870 | 1 Sharecms | 1 Sharecms | 2017-09-28 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the (1) eventID parameter to event_info.php and the (2) userID parameter to list_user.php. | |||||
CVE-2008-2869 | 1 E-topbiz | 1 Link Ads 1 | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands via the linkid parameter. | |||||
CVE-2008-2874 | 1 Softbizscripts | 1 Softbiz Jokes And Funny Pics Script | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbjoke_id parameter, a different vector than CVE-2008-1050. | |||||
CVE-2008-2875 | 1 Webdevindo-cms | 1 Webdevindo-cms | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL commands via the hal parameter. | |||||
CVE-2008-2897 | 1 Pagesquid | 1 Pagesquid Cms | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in PageSquid CMS 0.3 Beta allows remote attackers to execute arbitrary SQL commands via the page parameter. | |||||
CVE-2008-2891 | 1 Emusoft | 1 Emucms | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a category action. | |||||
CVE-2008-2900 | 1 Phpauction | 1 Phpauction | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. | |||||
CVE-2008-2892 | 2 Feellove, Joomla | 2 Exp Shop Component, Com Expshop | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_payment action to index.php. | |||||
CVE-2008-2893 | 1 Ajhyip | 1 Aj Square Aj-hyip | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in news.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-2532. | |||||
CVE-2008-2902 | 1 Alstrasoft | 1 Askme Pro | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085. | |||||
CVE-2008-2904 | 1 Phpmycart | 1 Phpmycart | 2017-09-28 | 7.5 HIGH | N/A |
SQL injection vulnerability in shop.php in Conkurent PHPMyCart allows remote attackers to execute arbitrary SQL commands via the cat parameter. | |||||
CVE-2008-2903 | 1 Awbs | 1 Advanced Webhost Billing System | 2017-09-28 | 6.8 MEDIUM | N/A |
SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter. | |||||
CVE-2008-2906 | 1 Webchamado | 1 Webchamado | 2017-09-28 | 6.8 MEDIUM | N/A |
SQL injection vulnerability in lista_anexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the tsk_id parameter. | |||||
CVE-2008-2907 | 1 Webchamado | 1 Webchamado | 2017-09-28 | 6.8 MEDIUM | N/A |
SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the eml parameter. | |||||
CVE-2008-2915 | 1 Preprojects | 1 Pre Job Board | 2017-09-28 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the (1) position or (2) kw parameter. |