Vulnerabilities (CVE)

Filtered by CWE-89
Total 11593 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-5630 1 Bbsprocess 1 Bbportals 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in tnews.php in BBsProcesS BBPortalS 1.5.10 through 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a tnews action.
CVE-2007-5490 1 Okulumunsitesi 1 Portal 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2007-5485 1 Kwsphp 1 Kwsphp 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter.
CVE-2007-5458 1 Alorys-hebergement 2 Kwsphp, Newsletter Module 2017-09-29 6.8 MEDIUM N/A
SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsletter parameter.
CVE-2007-5452 1 Php-stats 1 Php-stats 2017-09-29 10.0 HIGH N/A
Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arbitrary SQL commands via the (1) ip or (2) t parameter.
CVE-2007-5449 1 Softbiz 1 Recipes Portal Script 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in searchresult.php in Softbiz Recipes Portal Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter.
CVE-2007-5408 1 Cplinks 1 Cpdynalinks 2017-09-29 6.8 MEDIUM N/A
SQL injection vulnerability in category.php in cpDynaLinks 1.02 allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVE-2007-5316 1 Softbizscripts 1 Softbiz Jobs And Recruitment Script 2017-09-29 5.0 MEDIUM N/A
SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2007-5308 1 Php Homepage M 1 Php Homepage M 2017-09-29 6.8 MEDIUM N/A
SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.
CVE-2007-5272 1 Furkan Tastan Blog 1 Furkan Tastan Blog 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action.
CVE-2007-5261 1 Iscripts 1 Multicart 2017-09-29 6.4 MEDIUM N/A
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.
CVE-2007-5233 1 Deonixscripts 1 Web Template Management System 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a readmore action.
CVE-2007-5177 2 Mambads, Mambo 2 Mambads, Mambo 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter.
CVE-2007-5123 1 Solidweb 1 Novus 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the nota_id parameter.
CVE-2007-5122 1 Softbizscripts 1 Classifieds Plus Script 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in store_info.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2007-5068 1 Phpfullannu 1 Phpfullannu 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL commands via the mod parameter.
CVE-2007-5061 1 Clansphere 1 Clansphere 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to index.php in a banners action.
CVE-2007-5016 1 Insane Visions 1 Onecms 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands via the abc parameter.
CVE-2007-4984 2 Ktauber, Phpbb 2 Stylesdemo, Phpbb 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in the Ktauber.com StylesDemo mod for phpBB 2.0.xx allows remote attackers to execute arbitrary SQL commands via the s parameter.
CVE-2007-4979 1 Kwsphp 1 Kwsphp 2017-09-29 7.5 HIGH N/A
SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a results action, a different module than CVE-2007-4956.2.