Total
9311 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2010-1660 | 1 Clscript | 1 Clscript Classifieds Script | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via the hpId parameter. | |||||
CVE-2010-1656 | 1 Airiny | 1 Com Abc | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the sectionid parameter in an abc action to index.php. | |||||
CVE-2010-2142 | 1 Murat Ersoy | 1 Cyberhost | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in default.asp in Cyberhost allows remote attackers to execute arbitrary SQL commands via the id parameter. | |||||
CVE-2010-1702 | 1 Whmcs | 1 Whmcs | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in submitticket.php in WHMCompleteSolution (WHMCS) 4.2 allows remote attackers to execute arbitrary SQL commands via the deptid parameter. | |||||
CVE-2010-1499 | 1 Musicboxv2 | 1 Musicbox | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter. | |||||
CVE-2010-1604 | 1 Ncrypted | 1 Nct Jobs Portal Script | 2017-08-16 | 6.8 MEDIUM | N/A |
Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the (1) user parameter (aka login field) and (2) passwd parameter (aka password field). NOTE: some of these details are obtained from third party information. | |||||
CVE-2010-0458 | 1 Netartmedia | 1 Blog System | 2017-08-16 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to index.php and the (2) note parameter to blog.php. | |||||
CVE-2010-1496 | 2 Jolt, Joomla | 2 Com Joltcard, Joomla\! | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cardID parameter in a view action to index.php. | |||||
CVE-2010-2135 | 1 Hazelpress | 1 Hazelpress | 2017-08-16 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) password fields. | |||||
CVE-2010-2141 | 1 Nitropowered | 1 Nitro Web Gallery | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action. | |||||
CVE-2010-1493 | 2 Awdsolution, Joomla | 2 Com Awdwall, Joomla\! | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cbuser parameter in an awdwall action to index.php. | |||||
CVE-2010-1070 | 1 Imagoscripts | 1 Deviant Art Clone | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in ImagoScripts Deviant Art Clone allows remote attackers to execute arbitrary SQL commands via the seid parameter in a forums viewcat action. | |||||
CVE-2010-1538 | 1 Bluestrikeweb | 1 Phpraincheck | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in print_raincheck.php in phpRAINCHECK 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | |||||
CVE-2010-3211 | 2 Jextn, Joomla | 2 Com Jefaqpro, Joomla\! | 2017-08-16 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via category categorylist operations with (1) the catid parameter or (2) the catid parameter in a lists action. | |||||
CVE-2010-1047 | 1 Masa2el | 1 Music City | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a singer action. | |||||
CVE-2010-2714 | 1 Tcwonline | 1 Tcw Php Album | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album parameter. | |||||
CVE-2010-3423 | 2 Drupal, Freka | 2 Drupal, Yr Verdata | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in the Yr Weatherdata module for Drupal 6.x before 6.x-1.6 allows remote attackers to execute arbitrary SQL commands via the sorting method. | |||||
CVE-2010-1865 | 1 Csphere | 1 Clansphere | 2017-08-16 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the IP address to the cs_getip function in generate.php in the Captcha module, or (2) the s_email parameter to the cs_sql_select function in the MySQL database driver (mysql.php). | |||||
CVE-2010-0980 | 1 Mitchell Sleeper | 1 L4d Stats | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter. | |||||
CVE-2010-2134 | 1 Http-solution | 1 Project Man | 2017-08-16 | 7.5 HIGH | N/A |
Multiple SQL injection vulnerabilities in login.php in Project Man 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter. |