Total
14138 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2008-2791 | 1 Kalptaru Infotech | 1 Comparison Engine Power Script | 2024-11-21 | N/A |
SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | ||||
CVE-2008-2790 | 1 Mountaingrafix | 1 Easytrade | 2024-11-21 | N/A |
SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter. | ||||
CVE-2008-2789 | 1 Basic-cms | 1 Basic-cms | 2024-11-21 | N/A |
SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id parameter. | ||||
CVE-2008-2781 | 1 Dzoic | 1 Handshakes | 2024-11-21 | N/A |
SQL injection vulnerability in index.php in DZOIC Handshakes 3.5 allows remote attackers to execute arbitrary SQL commands via the fname parameter in a members search action. | ||||
CVE-2008-2778 | 1 Revokesoft | 1 Revokebb | 2024-11-21 | N/A |
SQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers to execute arbitrary SQL commands via the search parameter. | ||||
CVE-2008-2775 | 1 Dt Centrepiece | 1 Dt Centrepiece | 2024-11-21 | N/A |
SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL commands via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | ||||
CVE-2008-2774 | 1 Cartkeeper | 1 Ckgold Shopping Cart | 2024-11-21 | N/A |
SQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows remote attackers to execute arbitrary SQL commands via the category_id parameter, a different vector than CVE-2007-4736. | ||||
CVE-2008-2770 | 1 Mycrocms | 1 Mycrocms | 2024-11-21 | N/A |
SQL injection vulnerability in index.php in MycroCMS 0.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the entry_id parameter. | ||||
CVE-2008-2767 | 1 Xigla | 1 Absolute Poll Manager Xe | 2024-11-21 | N/A |
SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter. | ||||
CVE-2008-2765 | 1 Xigla | 1 Absolute Image Gallery Xe | 2024-11-21 | N/A |
SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action. | ||||
CVE-2008-2763 | 1 Xigla | 1 Absolute Live Support Xe | 2024-11-21 | N/A |
SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter. | ||||
CVE-2008-2762 | 1 Xigla | 1 Absolute Form Processor Xe | 2024-11-21 | N/A |
SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter. | ||||
CVE-2008-2760 | 1 Xigla | 1 Absolute Banner Manager | 2024-11-21 | N/A |
SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter. | ||||
CVE-2008-2757 | 1 Xigla | 1 Absolute News Manager Xe | 2024-11-21 | N/A |
SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter. | ||||
CVE-2008-2755 | 1 Jamm-media | 1 Jamm Cms | 2024-11-21 | N/A |
SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. | ||||
CVE-2008-2754 | 1 Efiction | 1 Efiction | 2024-11-21 | N/A |
SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the list parameter. | ||||
CVE-2008-2753 | 1 Paridel | 1 Pooya Site Builder | 2024-11-21 | N/A |
Multiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) xslIdn parameter to (a) utils/getXsl.aspx, and the (2) part parameter to (b) getXml.aspx and (c) getXls.aspx in utils/. | ||||
CVE-2008-2746 | 1 Gryphon | 1 Gllcts2 | 2024-11-21 | N/A |
SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the detail parameter. | ||||
CVE-2008-2701 | 1 Joomla | 1 Com Gameq | 2024-11-21 | N/A |
SQL injection vulnerability in the GameQ (com_gameq) component 4.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a page action to index.php. | ||||
CVE-2008-2700 | 1 Gwm | 1 Galatolo Webmanager | 2024-11-21 | N/A |
SQL injection vulnerability in view.php in Galatolo WebManager 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. |