Vulnerabilities (CVE)

Filtered by CWE-89
Total 11593 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-6149 2 Joomla, Joomlaapps 2 Joomla, Com Mdigg 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in the mDigg (com_mdigg) component 2.2.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cagtegory parameter in a story_lists action to index.php.
CVE-2008-6069 2 123flashchat, E107 2 Echat Plugin, E107 2018-10-11 6.8 MEDIUM N/A
SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter.
CVE-2008-6043 1 Phpprobid 1 Php Pro Bid 2018-10-11 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to execute arbitrary SQL commands via the (1) order_field and (2) order_type parameters to categories.php and unspecified other components. NOTE: some of these details are obtained from third party information.
CVE-2008-6038 1 Mapcal 1 Mapcal 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dsp_editevent.php.
CVE-2008-5998 1 Drupal 2 Ajax Checklist, Drupal 2018-10-11 6.0 MEDIUM N/A
Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow remote authenticated users, with "update ajax checklists" permissions, to execute arbitrary SQL commands via a save operation, related to the (1) nid, (2) qid, and (3) state parameters.
CVE-2008-5957 2 Joomla, Mydyngallery 2 Joomla, Mydyngallery 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in the Mydyngallery (com_mydyngallery) component 1.4.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the directory parameter to index.php.
CVE-2008-5707 1 Aspindir 1 Iltaweb Alisveris Sistemi 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter.
CVE-2008-5336 1 Bdigital Web Solutions 1 Webstudio Cms 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid parameter.
CVE-2008-5268 1 Aspportal 1 Aspportal 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the Topic_Id parameter.
CVE-2008-5222 1 Dvbbs 1 Dvbbs 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVE-2008-5163 1 Theratstudios 1 The Rat Cms 2018-10-11 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewarticle.php and (2) viewarticle2.php.
CVE-2008-5097 1 Myfwb 1 Myfwb 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVE-2008-5051 2 Jooblog, Joomla 2 Jooblog, Joomla 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PostID parameter to index.php.
CVE-2008-4778 1 Dream4 1 Koobi Cms 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL commands via the galid parameter in a showimages action.
CVE-2008-4777 2 Joomla, Mambo 3 Com Lms, Joomla, Mambo 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task.
CVE-2008-4732 2 Pressography, Wordpress 2 Wp Comment Remix Plugin, Wordpress 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVE-2008-4611 1 Php Arsivimiz 1 Php Ziyaretci Defteri 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter.
CVE-2008-4458 1 E-php Scripts 1 B2b Trading Marketplace Script 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action.
CVE-2008-4423 1 Ovidentia 1 Ovidentia 2018-10-11 6.5 MEDIUM N/A
SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the item parameter in a contact modify action.
CVE-2008-4364 1 Parsagostar 1 Parsaweb Cms 2018-10-11 7.5 HIGH N/A
SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the (1) id parameter in the "page" page and (2) txtSearch parameter in the "Search" page.