Export limit exceeded: 21746 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,746

Export CSV
CVE-2008-5197

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detail_adverts action.

CVSS 2.0 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Php-fusion
Products
Php-fusion
CVE-2008-5198

SQL injection vulnerability in memberlist.php in Acmlmboard 1.A2 allows remote attackers to execute arbitrary SQL commands via the pow parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Vizzed
Products
Acmlmboard
CVE-2008-5200

SQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Joomla Mambo
Products
Com Xewebtv Joomla Mambo
CVE-2008-5208

SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Joomla Mambo
Products
Com Datsogallery Joomla Mambo
CVE-2008-5212

SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the item_id parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Aj Square
Products
Aj Auction
CVE-2008-5213

SQL injection vulnerability in featured_article.php in AJ Article 1.0 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a search detail action.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Aj Square
Products
Aj Article
CVE-2008-5215

SQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote attackers to execute arbitrary SQL commands via the link parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Clanlite
Products
Clanlite
CVE-2008-5216

SQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Aj Square
Products
Zeuscart
CVE-2008-5222

SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Dvbbs
Products
Dvbbs
CVE-2008-5223

SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Airvae
Products
Commerce
CVE-2008-5226

SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the ma_cat parameter in a view action to index.php, a different vector than CVE-2007-5177.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Joomla Mambads Mambo
Products
Joomla Mambads Mambo
CVE-2008-5267

SQL injection vulnerability in answer.php in Experts 1.0.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the question_id parameter.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Experts
Products
Experts
CVE-2008-5268

SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the Topic_Id parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Aspportal
Products
Aspportal
CVE-2008-5269

SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands via the shownews parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Powie
Products
Psys
CVE-2008-5270

SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Wareziz
Products
Yuhhu Superstar 2008
CVE-2008-5287

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Scripts4you
Products
Faq Manager
CVE-2008-5289

SQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Scripts4you
Products
Clean Cms
CVE-2008-5292

SQL injection vulnerability in view_snaps.php in VideoGirls BiZ allows remote attackers to execute arbitrary SQL commands via the type parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Videogirls
Products
Videogirls Biz