Vulnerabilities (CVE)

Filtered by CWE-89
Total 11593 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-2856 1 Ownrs 1 Ownrs 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-2853 1 Easy Webstore 1 Easy Webstore 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in Easy Webstore 1.2 allows remote attackers to execute arbitrary SQL commands via the cat_path parameter.
CVE-2008-2847 1 Softdivision 1 Maxtrade Aoi 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in the Trade module in Maxtrade AIO 1.3.23 allows remote attackers to execute arbitrary SQL commands via the categori parameter in a pocategorisell action to modules.php.
CVE-2008-2846 1 Boatscripts 1 Boatscripts Classifieds 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL commands via the type parameter.
CVE-2008-2845 1 Mybizz-classifieds 1 Mybizz-classifieds 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVE-2008-2844 1 Carscripts 1 Carscripts Classifieds 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in Carscripts Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVE-2008-2843 1 Doitlive 1 Cms 2017-09-29 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in doITLive CMS 2.50 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter in an USUB action to default.asp and the (2) Licence[SpecialLicenseNumber] (aka LicenceId) cookie to edit/default.asp.
CVE-2008-2837 1 Cms.brdconcept 1 Cms-brd 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the menuclick parameter.
CVE-2008-2835 1 Igsuite 1 Igsuite 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to execute arbitrary SQL commands via the formid parameter.
CVE-2008-2834 1 Sidb 1 Scientific Image Database 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-2823 1 Phpeasynews 1 Phpeasyblog 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.
CVE-2008-2817 1 Nitropowered 1 Nitro Web Gallery 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action.
CVE-2008-2816 1 O2php 1 Oxygen 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in post.php in Oxygen (aka O2PHP Bulletin Board) 2.0 allows remote attackers to execute arbitrary SQL commands via the repquote parameter in a reply action, a different vector than CVE-2006-1572.
CVE-2008-2796 1 Freecms.us 1 Freecms 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVE-2008-2793 1 Clip-share 1 Clipshare 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQL commands via the tid parameter.
CVE-2008-2792 1 Erocms 1 Erocms 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site parameter.
CVE-2008-2791 1 Kalptaru Infotech 1 Comparison Engine Power Script 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-2790 1 Mountaingrafix 1 Easytrade 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-2789 1 Basic-cms 1 Basic-cms 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id parameter.
CVE-2008-2778 1 Revokesoft 1 Revokebb 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers to execute arbitrary SQL commands via the search parameter.