Export limit exceeded: 425863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 21746 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,746

Export CSV
CVE-2008-4436

SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Bblog
Products
Wbblog
CVE-2008-4457

SQL injection vulnerability in inc/inc_statistics.php in MemHT Portal 3.9.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a stats_res cookie to index.php.

CVSS 2.0 · 6.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Memht
Products
Memht Portal
CVE-2008-4458

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
E-php Scripts
Products
B2b Trading Marketplace Script
CVE-2008-4459

SQL injection vulnerability in pick_users.php in the groups module in eXtrovert Thyme 1.3 allows remote attackers to execute arbitrary SQL commands via the uname_search parameter. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Extrovert Software
Products
Thyme
CVE-2008-4461

SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Vastal I-tech
Products
Dating Zone
CVE-2008-4462

SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Vastal I-tech
Products
Visa Zone
CVE-2008-4463

SQL injection vulnerability in view_news.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Vastal I-tech
Products
Jobs Zone
CVE-2008-4464

SQL injection vulnerability in view_mags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Vastal I-tech
Products
Mag Zone
CVE-2008-4465

SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Vastal I-tech
Products
Dvd Zone
CVE-2008-4466

SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Vastal I-tech
Products
Cosmetics Zone
CVE-2008-4467

SQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Vastal I-tech
Products
Toner Cart
CVE-2008-4468

SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Vastal I-tech
Products
Share Zone
CVE-2008-4469

SQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coder_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Vastal I-tech
Products
Freelance Zone
CVE-2008-4487

SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) site_name, (2) email, (3) theme_chosen, (4) hp, (5) c_meta, (6) id, and (7) c_js parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Atarone
Products
Atarone
CVE-2008-4492

SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands via the usNick cookie.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Yourownbux
Products
Yourownbux
CVE-2008-4494

SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Torrenttrader
Products
Torrenttrader
CVE-2008-4497

SQL injection vulnerability in event_detail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute arbitrary SQL commands via the event_id parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Built2go
Products
Real Estate Listings
CVE-2008-4498

SQL injection vulnerability in searchresults.php in PHP Autos 2.9.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Phpautos
Products
Phpautos