Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,746

Export CSV
CVE-2008-2560

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Fourtwosevenbb
Products
427bb
CVE-2008-2562

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the css_str parameter in an edit action.

CVSS 2.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Powerphlogger
Products
Powerphlogger
CVE-2008-2564

SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Joomla
Products
Com Jotloader Joomla
CVE-2008-3369

SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the category_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Viart
Products
Viart Shop
CVE-2008-3370

SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access (CUA) 4.0_4735.p4 allows remote attackers to execute arbitrary SQL commands via the user (user name) field.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Emc
Products
Centera Universal Access
CVE-2008-3372

SQL injection vulnerability in search_form.php in Getacoder Clone allows remote attackers to execute arbitrary SQL commands via the sb_protype parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Greatclone
Products
Getacoder Clone
CVE-2008-3374

SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the rsargs array parameter in an __exp__getFeedContent action.

CVSS 2.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Gregarius
Products
Gregarius
CVE-2008-3377

SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the image_id parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Brandon Tallent
Products
Phptest
CVE-2008-3378

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Fizzmedia Negativekarma
Products
Fizzmedia
CVE-2008-3382

SQL injection vulnerability in mojoClassified.cgi in MojoClassifieds 2.0 allows remote attackers to execute arbitrary SQL commands via the cat_a parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Mojoscripts
Products
Mojoclassifieds
CVE-2008-3383

SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via the cat_a parameter in a browse action.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Mojoscripts
Products
Mojoauto
CVE-2008-3386

SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Alstrasoft
Products
Video Share Enterprise
CVE-2008-3387

SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the dbtable parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Phpfootball
Products
Phpfootball
CVE-2008-3388

Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via the article parameter to (1) comaddok.php and (2) comlook.php.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Easy-script
Products
Def Blog
CVE-2008-3393

SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Infomining
Products
Bookmine
CVE-2008-3403

SQL injection vulnerability in mojoClassified.cgi in MojoPersonals allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Mojoscripts
Products
Mojopersonals
CVE-2008-3406

SQL injection vulnerability in showcat.php in phpLinkat 0.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Phplinkat
Products
Phplinkat
CVE-2008-3412

SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a (1) pro_show or (2) disppro action to the default URI.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Ecshop
Products
Epshop
CVE-2008-3413

SQL injection vulnerability in category.php in Greatclone GC Auction Platinum allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Greatclone
Products
Auction Platinum
CVE-2008-3414

SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the art parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Siteadmin
Products
Cms