SQL injection Prevention - POST : suspicious OPENQUERY statement in data


Description   This alarm is raised when a suspicious combination of SQL known keywords is found in a POST request. This signature in the Internet profile has been configured to pass, ignore.The great number of public forums on the databases and the operation of certain dynamic sites make the risk of false positives high on public servers.
     
Default
configuration
 
Profiles High Medium Low Internet
Action Block Pass Pass Pass
Alarm Level Minor Minor Ignore Ignore
     
References  
     
Available since   ASQ v3.2.0
     
Protects   Cacti "$data_query_id" SQL Injection Vulnerability
Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
Joomla J2Store Extension SQL Injection Vulnerability Fixed by 3.1.7
Joomla Third-Party Modules Multiple Vulnerabilities
Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
Cacti Multiple Vulnerabilities Fixed by 0.8.8e
Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
LimeSurvey SQL Injection Vulnerability Fixed by 2.06+ (Build 150629)
LimeSurvey "sid" Parameter SQL Injection Vulnerability Fixed by 2.06+ (Build 150618)
Cacti Three Vulnerabilities
Cacti Multiple Vulnerabilities Fixed by 0.8.8d
Wordpress Multiple Themes Vulnerabilities
Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
Cisco Unified Communications Manager Two SQL Injection Vulnerabilities
phpMyBackupPro Login SQL Injection Vulnerability
Galette ZendDB Two SQL Injection Vulnerabilities
WordPress Cart66 Lite Plugin Security Bypass and SQL Injection Vulnerabilities
WordPress WP Symposium Plugin "tray" SQL Injection Vulnerability
WordPress Google Doc Embedder Plugin "pgid" SQL Injection Vulnerability
WordPress Cart66 Lite Plugin "id" SQL Injection Vulnerability
Movable Type XML-RPC Interface SQL Injection Vulnerability
PHP-Fusion Multiple SQL Injection Vulnerabilities
OpenVAS Manager timezone SQL Injection Vulnerability
MantisBT Multiple Vulnerabilities
FluxBB "req_new_email" SQL Injection Vulnerability
Open-Xchange OX App Suite "jslob" API Call SQL Injection Vulnerability
TestLink Multiple SQL Injection Vulnerabilities
Pligg CMS "id" SQL Injection Vulnerability
Pro Chat Rooms Text Chat Room / Pro Chat Rooms Audio/Video Chat Room Cross-Site Scripting and SQL Injection Vulnerabilities
Sabre AirCentre Crew CWPLogin.aspx Two SQL Injection Vulnerabilities
InvGate Service Desk Multiple SQL Injection Vulnerabilities
Dolibarr ERP/CRM Multiple Cross-Site Scripting, Script Insertion, and SQL Injection Vulnerabilities
Raritan PowerIQ "sort" and "dir" SQL Injection Vulnerabilities
openSIS "USERNAME" SQL Injection Vulnerability
Cacti Multiple Vulnerabilities
web2Project Multiple SQL Injection Vulnerabilities
WordPress Booking System Plugin "booking_form_id" SQL Injection Vulnerability
KeepInTouch kitForm Extension "sorter_value" SQL Injection Vulnerability
Orbit Open Ad Server "site_directory_sort_field" SQL Injection Vulnerability
Cacti Multiple Vulnerabilities
HostBill Staff Tickets SQL Injection Vulnerability
Joomla! JV Comment Component "id" SQL Injection Vulnerability
CSP MySQL User Manager "loginuser" SQL Injection Vulnerability
CUBIC CMS Multiple Vulnerabilities
InstantCMS "orderby" SQL Injection Vulnerability
Joomla! Projectfork Component "search" and "order" SQL Injection Vulnerabilities
Nagios XI "tfPassword" SQL Injection Vulnerability
Project'Or RIA Cross-Site Scripting and SQL Injection Vulnerabilities
SecureSphere Web Application Firewall Web Console SQL Injection Vulnerability
ImpressPages CMS Multiple Vulnerabilities
CourseMS Cross-Site Scripting and SQL Injection Vulnerabilities
SecureSphere Web Application Firewall Web Console SQL Injection Vulnerability
CMS Formulasi Multiple Vulnerabilities
Zabbix Multiple SQL Injection Vulnerabilities
OpenEMR "authProvider" SQL Injection Vulnerability
OpenEMR Cross-Site Scripting and SQL Injection Vulnerabilities
Practico CMS "uid" SQL Injection Vulnerability
glFusion "cat_id" SQL Injection Vulnerability
Cacti Script Insertion and SQL Injection Vulnerabilities
Gnew Cross-Site Scripting and SQL Injection Vulnerabilities
Joomla! SectionEx Component Two SQL Injection Vulnerabilities
OSSIM Two Cross-Site Scripting Vulnerabilities
JM LLC Basic Forum Multiple Vulnerabilities
Saurus CMS Multiple Vulnerabilities
astTECS Voice Logger for Call Center / Contact Center Two Vulnerabilities
OpenEMR Script Insertion and SQL Injection Vulnerabilities
Monkey CMS Multiple Vulnerabilities
GLPI "filename" SQL Injection Vulnerability
GLPI "users_id_assign" SQL Injection Vulnerability
PHD Help Desk Two SQL Injection Vulnerabilities
Vanilla Forums Parameter Name SQL Injection Vulnerability
WordPress LeagueManager Plugin Security Bypass and SQL Injection Vulnerabilities
PHP-Fusion Multiple SQL Injection and Cross-Site Scripting Vulnerabilities
Scripts Genie Pet Rate Pro SQL Injection and PHP Code Execution Vulnerabilities
AdaptCMS Multiple Vulnerabilities
WeBid Multiple SQL Injection Vulnerabilities
WordPress Store Locator Plus Plugin "query" SQL Injection Vulnerability
Astium SQL Injection and Denial of Service Vulnerabilities
MyBB Profile Wii Friend Code Plugin Cross-Site Scripting and SQL Injection Vulnerabilities
ClipBucket Multiple SQL Injection Vulnerabilities
Intramaps Multiple Vulnerabilities
WordPress Poll Plugin Multiple Script Insertion Vulnerabilities
Subrion CMS Cross-Site Scripting and SQL Injection vulnerabilities
AContent Security Bypass and SQL Injection Vulnerabilities
AContent Cross-Site Scripting and SQL Injection Vulnerabilities
OpenX Cross-Site Scripting and SQL Injection Vulnerabilities
TorrentTrader Cross-Site Scripting and SQL Injection Vulnerabilities
webERP Multiple Vulnerabilities
TCExam Cross-Site Scripting and SQL Injection Vulnerabilities
Group-Office "sort" SQL Injection Vulnerability
WordPress Mz-jajak Plugin "id" SQL Injection Vulnerability
Cyclope Employee Surveillance Solution Security Bypass and SQL Injection Vulnerabilities
WordPress G-Lock Double Opt-in Manager Plugin Two Security Bypass Vulnerabilities
Limny "escape()" SQL Injection Vulnerability
Dell SonicWALL Scrutinizer "q" SQL Injection Vulnerability
WordPress WP-Predict Plugin "predictSelection" and "predictId" SQL Injection Vulnerabilities
WordPress Automatic Plugin "q" SQL Injection Vulnerability
Contao "field" SQL Injection Vulnerability
SyndeoCMS Script Insertion and SQL Injection Vulnerabilities
WordPress Google Maps Via Store Locator Plus Plugin Path Disclosure and SQL Injection
Bigware Shop "pollid" Two SQL Injection Vulnerabilities
TopicsViewer Multiple SQL Injection Vulnerabilities
activeCollab Multiple Vulnerabilities
Adiscon LogAnalyzer Cross-Site Scripting and SQL Injection Vulnerabilities
Pligg CMS Multiple Cross-Site Scripting and SQL Injection Vulnerabilities
MyClientBase Script Insertion and SQL Injection Vulnerabilities
ManageEngine SupportCenter Plus Multiple Vulnerabilities
e-ticketing "user_name" and "password" SQL Injection Vulnerabilities
osCMax Multiple Vulnerabilities
WordPress BuddyPress Plugin "exclude" SQL Injection Vulnerability
RivetTracker "hash" SQL Injection Vulnerabilities
BrewBlogger Multiple Vulnerabilities
The Uploader "username" SQL Injection Vulnerability
ELBA "account group name" SQL Injection Vulnerability
Seo Panel "website_id" and "lang_code" SQL Injection Vulnerabilities
phpDenora Multiple File Disclosure and SQL Injection Vulnerabilities
LimeSurvey "fieldnames" SQL Injection Vulnerability
SocialCMS Enterprise Cross-Site Scripting and SQL Injection Vulnerabilities
TestLink Multiple SQL Injection Vulnerabilities
Gazie "Login" Cross-Site Scripting and SQL Injection Vulnerabilities
XRay CMS "username" SQL Injection Vulnerability
zenphoto Multiple Vulnerabilities
Campaign Enterprise "SID" SQL Injection Vulnerability
Bigware Shop "lastname" SQL Injection Vulnerability
MangosWeb Enhanced "login" SQL Injection Vulnerability
tinyguestbook Script Insertion and SQL Injection Vulnerabilities
e107 Multiple Vulnerabilities
Open Business Management Multiple Vulnerabilities
cApexWEB "dfuserid" and "dfpassword" SQL Injection Vulnerabilities
BrowserCRM Multiple Vulnerabilities
Seotoaster "selectUserIdByLoginPass()" SQL Injection Vulnerability
WordPress SCORM Cloud For WordPress Plugin "active" SQL Injection Vulnerability
HitAppoint "username" SQL Injection Vulnerability
KnowledgeTree "username" SQL Injection Vulnerability
Alstrasoft EPay Enterprise "cid" and "product" SQL Injection Vulnerabilities
Meditate "username_input" SQL Injection Vulnerability
PHP Inventory Multiple SQL Injection Vulnerabilities
Joomla! XOBBIX Component "prodid" SQL Injection Vulnerability
webERP Multiple Vulnerabilities
Joomla AutarTimonial Component "limit" SQL Injection Vulnerability
Joomla Canteen Component Multiple Vulnerabilities
ScriptsFeed / BrotherScripts Auto Dealer Software "id" SQL Injection Vulnerability
Joomla DJ-ArtGallery Component "cid[]" Two Vulnerabilities
ScriptsFeed Recipes Listing Portal SQL Injection Vulnerabilities
iScripts eSwap Cross-Site Scripting and SQL Injection Vulnerabilities
iScripts EasyBiller SQL Injection and Script Insertion Vulnerabilities
Science Fair In A Box "type" Cross-Site Scripting and SQL Injection
Document Library "intGroupID" SQL Injection Vulnerability
MCLogin System "myusername" SQL Injection Vulnerability
Drupal Webform CiviCRM Integration Module Multiple SQL Injection Vulnerabilities
Joomla! JEEMA SMS Component Cross-Site Request Forgery and SQL Injection Vulnerabilities
Drupal Views Module SQL Injection Vulnerability
Symphony CMS Multiple Cross-Site Scripting and SQL Injection Vulnerabilities
VP-ASP Unspecified SQL Injection Vulnerability
Joomla! Alameda Component "storeid" SQL Injection Vulnerability
SPIP Unspecified SQL Injection Vulnerability
PrestaShop Presta2PhpList Module "list" SQL Injection Vulnerability
Joomla! Freestyle FAQs and Testimonials Components Unspecified SQL Injection Vulnerability
DMXready Polling Booth Manager "QuestionID" SQL Injection Vulnerability
ColdGen ColdCalendar "EventID" SQL Injection Vulnerability
Joomla! Clantools Component Two SQL Injection Vulnerabilities
Joomla! Clantools Component "squad" SQL Injection Vulnerability
Joomla! Gantry Component "moduleid" SQL Injection Vulnerability
FestOS Multiple Vulnerabilities
chillyCMS "name" Cross-Site Scripting and SQL Injection Vulnerabilities
Pilot Cart Multiple Vulnerabilities
Pre Podcast Portal Password SQL Injection Vulnerability
TYPO3 Questionnaire Extension Cross-Site Scripting and SQL Injection Vulnerabilities
Joomla! Teams Component "PlayerID" SQL Injection Vulnerability
Entrans Cross-Site Scripting and SQL Injection Vulnerabilities
KaiBB Cross-Site Scripting and SQL Injection Vulnerabilities
wizmall "BID" and "UID" SQL Injection Vulnerabilities
OpenEMR Multiple Vulnerabilities
OpenEMR Script Insertion and SQL Injection Vulnerabilities
Yet Another CMS Two SQL Injection Vulnerabilities
Site@School Multiple Vulnerabilities
PunBB Reputation Plugin SQL Injection and Local File Inclusion
AContent Multiple Vulnerabilities
WordPress WP Photo Album Plus Plugin "wppa-album" SQL Injection Vulnerability
WordPress WordPress Users Plugin "uid" SQL Injection Vulnerability
Radfa Sabadkharid "add2cart" SQL Injection Vulnerability
EC-CUBE Two Unspecified SQL Injection Vulnerabilities
Joomla! eTree Component "id" and "user_id" SQL Injection Vulnerabilities
Drupal Certificate Login Module SQL Injection Vulnerability
MyBB MyStatus Plugin "statid" SQL Injection Vulnerability
MyBB Advanced Forum Signatures Plugin Multiple SQL Injection Vulnerabilities
6kbbs Multiple Vulnerabilities
KaiBB Two SQL Injection Vulnerabilities
Sonexis ConferenceManager Script Insertion and SQL Injection Vulnerabilities
Eclime Multiple Vulnerabilities
webSPELL Multiple Vulnerabilities
Netvolution CMS "Referer" HTTP Header SQL Injection Vulnerability
WordPress WP-PostRatings Plugin "[ratings]" Shortcode SQL Injection Vulnerability
Achievo Multiple Vulnerabilities
WordPress WP Bannerize Plugin "item[]" SQL Injection Vulnerability
MH Products Download Center "Name" SQL Injection Vulnerability
Parallels Plesk Panel Cross-Site Scripting and SQL Injection Vulnerabilities
WordPress Mingle Forum "edit_post_id" SQL Injection Vulnerability
TYPO3 dev/null robots.txt Extension SQL Injection Vulnerability
TYPO3 RTG Files Extension SQL Injection Vulnerability
Flynax Classifieds Products "f[city]" SQL Injection Vulnerability
Advanced Electron Forum Security Issue and Two Vulnerabilities
Cacti Cross-Site Scripting and SQL Injection Vulnerabilities
CMS Faethon Cross-Site Scripting and SQL Injection
phpList Multiple Vulnerabilities
Authenex Strong Authentication Server "username" SQL Injection Vulnerability
Ayco Emlak Multiple SQL Injection Vulnerabilities
Car Portal Multiple Vulnerabilities
WordPress Count Per Day Plugin "month" SQL Injection Vulnerability
Mercator Sentinel SQL Injection Vulnerability
WordPress WP e-Commerce Plugin "transaction_id" Two SQL Injection Vulnerabilities
TYPO3 Cache Flooding Denial of Service and SQL Injection Vulnerabilities
Support Incident Tracker Multiple Vulnerabilities
WordPress WP Forum Server Plugin "edit_post_id" SQL Injection Vulnerability
TYPO3 Direct Mail Subscription Extension Two Vulnerabilities
WordPress 1 Flash Gallery Plugin Multiple Vulnerabilities
WordPress Tweet old post Plugin "cat" SQL Injection Vulnerability
TIBCO Spotfire Products Multiple Vulnerabilities
vAuthenticate Multiple SQL Injection Vulnerabilities
WordPress WP Bannerize Plugin "id" SQL Injection Vulnerability
WordPress yolink Search Plugin Two SQL Injection Vulnerabilities
Free Help Desk Cross-Site Request Forgery and SQL Injection Vulnerabilities
Moodle Multiple Remote SQL Injection and Security Bypass Vulnerabilities
Samsung Integrated Management System DMS SQL Injection Vulnerability
Debian Security Update Fixes Doctrine Remote SQL Injection Vulnerability
Debian Security Update Fixes Request Tracker Multiple Vulnerabilities
MyBB Remote SQL Injection and Cross Site Request Forgery Vulnerabilities
Joomla SQL Injection and Multiple Information Disclosure Vulnerabilities
CA Total Defense Remote Code Execution and SQL Injection Vulnerabilities
Cacti Multiple SQL Injection and Cross Site Scripting Vulnerabilities
WEC Discussion Extension for TYPO3 Remote SQL Injection Vulnerability
Andy PHP Knowledgebase Multiple Remote SQL Injection Vulnerabilities
Fedora Security Update Fixes Doctrine Remote SQL Injection Vulnerability
Joomla Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Debian Security Update Fixes DTC Multiple SQL Injection Vulnerabilities
PyWebDAV Data Processing Multiple SQL Injection Vulnerabilities
IBM Tivoli Netcool/OMNIbus Web GUI Remote SQL Injection Vulnerability
Symantec Web Gateway "USERNAME" SQL Injection Vulnerability
ChurchInfo "WhichType" Parameter Remote SQL Injection Vulnerability
TYPO3 Code Execution and Multiple Cross Site Scripting Vulnerabilities
Movable Type SQL Injection and Cross Site Scripting Vulnerabilities
WordPress "do_trackbacks()" SQL Injection Information Disclosure Issue
IBM WebSphere Commerce Organization Admin Console SQL Injection
Joomla! Multiple Remote SQL Injection and Information Disclosure
Symantec IM Manager Administration Console SQL Injection Vulnerabilities
e107 Data Processing Multiple Remote SQL Injection Vulnerabilities
PBBoard Multiple SQL Injection and Cross Site Scripting Vulnerabilities
FreePBX Administrative Interface Multiple SQL Injection Vulnerabilities
Powermail for TYPO3 SQL Injection and Cross Site Scripting Vulnerabilities
Primitive CMS "cms_write.php" Security Bypass and SQL Injection
LightNEasy "handle" Parameter Remote SQL Injection Vulnerability
JGen for Joomla "id" Parameter Remote SQL Injection Vulnerability
Debian Security Update Fixes smbind SQL Injection Vulnerability
mBlogger "postID" Parameter Remote SQL Injection Vulnerability
TYPO3 Code Execution and Cross Site Scripting Vulnerabilities
Joomla! Multiple Cross Site Scripting and SQL Injection Vulnerabilities
CMSQLite Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Pre Multi-Vendor Shopping Malls "username" SQL Injection Vulnerability
BookLibrary From Same Author for Joomla SQL Injection Vulnerability
TaskFreak SQL Injection and Cross Site Scripting Vulnerabilities
Grafik CMS Multiple SQL Injection and Cross Site Scripting Vulnerabilities
OneCMS Multiple SQL Injection and Cross Site Scripting Vulnerabilities
2daybiz Social Community Script SQL Injection Vulnerabilities
PHP-Calendar Multiple SQL Injection and Cross Site Scripting Issues
Pre Job Board Pro Multiple Parameter SQL Injection Vulnerabilities
Subdreamer CMS "categoryids" Remote SQL Injection Vulnerability
VU Web Visitor Analyst "password" Parameter SQL Injection Vulnerability
Search Log for Joomla "search" Parameter SQL Injection Vulnerability
WmsCMS Multiple SQL Injection and Cross Site Scripting Vulnerabilities
ReVou SQL Injection and Cross Site Scripting Vulnerabilities
Sar News for Joomla "id" Parameter Remote SQL Injection Vulnerability
Chocky Soft 2005 "numb" Parameter Remote SQL Injection Vulnerability
Cacti Multiple Parameter SQL and Command Injection Vulnerabilities
phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities
Family Connections Multiple Parameter SQL Injection Vulnerabilities
ClanTiger "s_email" Parameter Remote SQL Injection Vulnerability
ClanSphere Captcha Generator and MySQL Driver SQL Injection Issues
Campsite "article_id" Parameter Remote SQL Injection Vulnerability
NolaPro Multiple Cross Site Scripting and SQL Injection Vulnerabilities
1024 CMS SQL Injection and Multiple Cross Site Scripting Vulnerabilities
2daybiz Auction Script "username" Remote SQL Injection Vulnerability
Infocus Real Estate Login Credentials Remote SQL Injection Vulnerability
CMScout "album" Parameter Remote SQL Injection Vulnerability
Debian Security Update Fixes Cacti SQL Injection Vulnerability
ATutor "course" Parameter Remote SQL Injection Vulnerability
Karra Multiple SQL Injection and Cross Site Scripting Vulnerabilities
FuturCMS SQL Injection and Multiple Cross Site Scripting Vulnerabilities
Ebay Clone Script SQL Injection and Cross Site Scripting Vulnerabilities
WebAsyst Shop-Script FREE File Inclusion and SQL Injection Issues
jdrugstopics Component for Joomla "id" SQL Injection Vulnerability
Mahara Security Update Fixes SQL Injection and Security Bypass Issues
Zabbix "user" Parameter Handling Remote SQL Injection Vulnerability
4xcms "user" Parameter Processing Remote SQL Injection Vulnerability
Domain Verkaus and Auktions Portal "id" SQL Injection Vulnerability
PhpMyLogon "username" Parameter Remote SQL Injection Vulnerability
Azeno CMS "id" Parameter Remote SQL Injection Vulnerability
Geekhelps ADMP SQL Injection and Local File Inclusion Vulnerabilities
Scriptsfeed Dating Software Remote SQL Injection Vulnerabilities
Scriptsfeed Business Directory Remote SQL Injection Vulnerabilities
Blax Blog "kadi" and "sifre" Remote SQL Injection Vulnerabilities
Baykus Yemek Tarifleri Multiple Remote SQL Injection Vulnerabilities
Uiga Personal Portal "id" Parameter Remote SQL Injection Vulnerability
Uiga FanClub "id" Parameter Remote SQL Injection Vulnerability
Article Friendly "username" and "password" SQL Injection Vulnerability
Cisco Security Agent SQL Injection and Directory Traversal Vulnerabilities
Debian Security Update Fixes OTRS SQL Injection Vulnerabilities
Killmonster "isadmin" and "password" SQL Injection Vulnerabilities
Rostermain "userid" and "password" SQL Injection Vulnerabilities
LedgerSMB SQL Injection and Cross Site Scripting Vulnerabilities
OCS Inventory NG SQL Injection and Cross Site Scripting Vulnerabilities
Debian Security Update Fixes phpGroupWare Multiple Vulnerabilities
TYPO3 Extensions SQL Injection and Cross Site Scripting Vulnerabilities
Novell ZENworks Asset Management SQL Injection Vulnerability
LineWeb Remote SQL Injection and Local File Inclusion Vulnerabilities
XOOPS Remote SQL Injection and Cross Site Scripting Vulnerabilities
Elite Gaming Ladders "account" Remote SQL Injection Vulnerability
SQL-Ledger Multiple SQL Injection and Cross Site Scripting Vulnerabilities
TYPO3 Extensions Multiple SQL Injection and Cross Site Scripting Issues
Quartz Concept Content Manager Remote SQL Injection Vulnerability
WSCreator "Email" Parameter Remote SQL Injection Vulnerability
Invision Power Board SQL Injection and Local Inclusion Vulnerabilities
Moodle Multiple Input Validation and Security Bypass Vulnerabilities
Taxonomy Timer Module for Drupal Remote SQL Injection Vulnerability
TYPO3 Extensions Multiple SQL Injection and Cross Site Scripting Issues
CubeCart "productId" Parameter Remote SQL Injection Vulnerability
FrontAccounting Multiple Remote SQL Injection Vulnerabilities
Super Serious Stats "uid" Parameter Remote SQL Injection Vulnerability
eoCMS "id" and "page" Parameters SQL Injection Vulnerabilities
PSArt "id" Parameter Remote SQL Injection Vulnerability
Attachment Module for PunBB "secure_str" SQL Injection Vulnerability
Basic Analysis and Security Engine Multiple Remote Vulnerabilities
ComicMaster Unspecified Remote SQL Injection Vulnerability
Nebula3 Remote SQL Injection and Cross Site Scripting Vulnerabilities
urlShort Remote SQL Injection and Cross Site Scripting Vulnerabilities
Tin Can Jukebox Unspecified Remote SQL Injection Vulnerability
RunCms "pid" and "forum" Parameters SQL Injection Vulnerabilities
TYPO3 Multiple Code Injection and Information Disclosure Vulnerabilities
Moodle Course List for Drupal Unspecified SQL Injection Vulnerability
phpMyAdmin for TYPO3 SQL Injection and Cross Site Scripting Issues
Flagbit Filebase for TYPO3 Unspecified SQL Injection Vulnerability
phpMyAdmin SQL Injection and Cross Site Scripting Vulnerabilities
Elite Gaming Ladders "platform" Remote SQL Injection Vulnerability
jLord RSS Feed Creator for Joomla "id" SQL Injection Vulnerability
Foobla Suggestions for Joomla "idea_id" SQL Injection Vulnerability
AdsDX "loginname" Parameter Remote SQL Injection Vulnerability
PHP Pro Bid "auction_id" Parameter Remote SQL Injection Vulnerability
AlphaUserPoints for Joomla "username2points" SQL Injection Vulnerability
Bugzilla SQL Injection and Information Disclosure Vulnerabilities
PHP Live! "deptid" Parameter Remote SQL Injection Vulnerability
Discuz! Plugin JiangHu "id" Parameter SQL Injection Vulnerability
Game Server for Joomla "id" Parameter SQL Injection Vulnerability
Mybuxscript PTC-BUX "id" Parameter SQL Injection Vulnerability
BandCMS "year" and "id" Parameters SQL Injection Vulnerabilities
Modern Script "s" Parameter Remote SQL Injection Vulnerability
LiveStreet Comments Processing Cross Site Scripting Vulnerability
Danneo CMS "comtitle" Parameter Remote SQL Injection Vulnerability
Uiga Church Portal "year" Parameter Remote SQL Injection Vulnerability
DigiFolio for Joomla "id" Parameter Remote SQL Injection Vulnerability
RASH Quote Management System (RQMS) SQL Injection Vulnerability
Pirates of The Caribbean "y" and "x" Remote SQL Injection Vulnerability
Allomani 2007 "cat" Parameter Parameter SQL Injection Vulnerability
Open Auto Classifieds File Upload and SQL Injection Vulnerabilities
Discuz! Plugin Crazy Star "fmid" Parameter SQL Injection Vulnerability
EMO Breader Manager "idd" Parameter SQL Injection Vulnerability
IP.Board "search.php" and "lostpass.php" SQL Injection Vulnerabilities
TYPO3 Multiple Extensions Remote SQL Injection Vulnerabilities
T3M E-Mail Marketing Tool for TYPO3 SQL Injection Vulnerability
Turnkey Arcade Script "sid" Parameter Remote SQL Injection Vulnerability
Siirler for Joomla "sid" Parameter Remote SQL Injection Vulnerability
NinjaMonials for Joomla "testimID" Remote SQL Injection Vulnerability
jTips for Joomla "season" Parameter Remote SQL Injection Vulnerability
ITechBids "productid" Parameter Remote SQL Injection Vulnerability
humanCMS Username and Password Remote SQL Injection Vulnerability
PHP Dir Submit "aid" Parameter Remote SQL Injection Vulnerability
Moa Gallery "gallery_id" Parameter Remote SQL Injection Vulnerability
Ed Charkow Supercharged Linking "id" SQL Injection Vulnerability
Infinity Remote File Disclosure and Remote SQL Injection Vulnerabilities
CMS Aspect Web Design "ProductID" Remote SQL Injection Vulnerability
Fedora Security Update Fixes OCS Inventory SQL Injection Vulnerability
Portel 2008 "patron" Parameter Remote SQL Injection Vulnerability
OpenNews "username" Parameter Remote SQL Injection Vulnerability
Irokez CMS "id" Parameter Handling Remote SQL Injection Vulnerability
ShopMaker Remote SQL Injection and Local File Inclusion Vulnerabilities
MOC Designs PHP News Remote SQL Injection Vulnerability
PPScript (PaymentProcessorScript) "cid" SQL Injection Vulnerability
Multi Website "Browse" Parameter Remote SQL Injection Vulnerability
Elvin SQL Injection and Multiple Cross Site Scripting Vulnerabilities
Questions Answered "username" Remote SQL Injection Vulnerability
SimpleLoginSys "username" Remote SQL Injection Vulnerability
TT Web Site Manager "tt_name" Remote SQL Injection Vulnerability
Ajax Short URL Script "username" Remote SQL Injection Vulnerability
AW-BannerAd "User" and "Password" SQL Injection Vulnerability
MCshoutbox SQL Injection and Arbitrary File Upload Vulnerabilities
Alibaba Clone "SellerID" and "IndustryID" SQL Injection Vulnerabilities
Tausch Ticket Script Multiple Parameter SQL Injection Vulnerabilities
Siteframe Remote SQL Injection and Information Disclosure Vulnerabilities
WebAsyst Shop-Script SQL Injection and Cross Site Scripting Vulnerability
MyPHPDating "page_id" Parameter Remote SQL Injection Vulnerability
Citrix XenCenterWeb Multiple Command and SQL Injection Vulnerabilities
KerviNet Forum SQL Injection and Cross Site Scripting Vulnerabilities
NEWSolved "newsscript.php" Multiple SQL Injection Vulnerabilities
BookFlip Component for Joomla "book_id" SQL Injection Vulnerability
K2 Component for Joomla "category" Remote SQL Injection Vulnerability
com_php for Joomla "id" Parameter Remote SQL Injection Vulnerability
Messages Library "CatID" Parameter Remote SQL Injection Vulnerability
osTicket Administrative Login Remote SQL Injection Vulnerability
RS-CMS "key" Parameter Processing Remote SQL Injection Vulnerability
Tickets Component for Joomla "id" Parameter SQL Injection Vulnerability
MyBB "birthdayprivacy" Parameter Remote SQL Injection Vulnerability
phpDatingClub SQL Injection and Cross Site Scripting Vulnerabilities
Debian Security Update Fixes GForge Multiple Vulnerabilities
Campus Virtual-LMS SQL Injection and Cross Site Scripting Vulnerabilities
Zip Store Chat "login" and "senha" Remote SQL Injection Vulnerability
Shop-Script Pro "current_currency" Remote SQL Injection Vulnerability
Frontis "source_class" Parameter Remote SQL Injection Vulnerability
Interlogy Profile Manager Basic "pmadm" SQL Injection Vulnerability
Virtue News Manager "nid" SQL Injection and Cross Site Scripting Issues
Virtue Shopping Mall "cid" Parameter Remote SQL Injection Vulnerability
Virtue Book Store "cid" Parameter Remote SQL Injection Vulnerability
Virtue Classifieds "category" Parameter SQL Injection Vulnerability
School Component for Joomla "classid" SQL Injection Vulnerability
MyCars "authuserid" Parameter Remote SQL Injection Vulnerability
SuperNews "noticia" Parameter Remote SQL Injection Vulnerability
OCS Inventory NG Server SQL Injection and File Disclosure Vulnerabilities
EgyPlus "username" and "password" Remote SQL Injection Vulnerability
MyMiniBill "orderid" Parameter Remote SQL Injection Vulnerability
phpBugTracker "username" Remote SQL Injection Vulnerability
WebMember "formID" Parameter Remote SQL Injection Vulnerability
MiniTwitter SQL Injection and Cross Site Scripting Vulnerabilities
OnlineRent "pid" Parameter Handling Remote SQL Injection Vulnerability
PHP Dir Submit Username and Password SQL Injection Vulnerability
pc4 Uploader "id" Parameter Remote SQL Injection Vulnerability
myGesuad Multiple SQL Injection and Cross Site Scripting Vulnerabilities
myColex Multiple SQL Injection and Cross Site Scripting Vulnerabilities
PHPenpals "ID" Parameter Remote SQL Injection Vulnerability
Custom T-shirt Design "id" SQL Injection and Cross Site Scripting Issues
Submitter Script "uNev" and "uJelszo" Remote SQL Injection Vulnerability
MaxCMS "m_username" Parameter Remote SQL Injection Vulnerability
Family Connections Multiple Parameter SQL Injection Vulnerabilities
Dokeos Remote SQL Injection and Cross Site Scripting Vulnerabilities
BIGACE CMS "username" Parameter Remote SQL Injection Vulnerability
uTopic "rating" Parameter Handling Remote SQL Injection Vulnerability
Luxbum "username" Parameter Remote SQL Injection Vulnerability
RTWebalbum "AlbumId" Parameter Remote SQL Injection Vulnerability
BluSky CMS "news_id" Parameter Remote SQL Injection Vulnerability
Drupal News Page Keywords Processing SQL Injection Vulnerability
New 5 Star Rating "myusername" Parameter Remote SQL Injection Vulnerability
Creasito "username" Parameter Remote SQL Injection Vulnerability
FunGamez SQL Injection and Local File Inclusion Vulnerabilities
WysGui CMS "admin_pages" Remote SQL Injection Vulnerability
EZ Webitor "txtUserId" and "txtPassword" SQL Injection Vulnerability
Seditio CMS Events Plugin "c" Remote SQL Injection Vulnerability
Q2 Solutions ConnX "txtEmail" Remote SQL Injection Vulnerability
BookJoomlas for Joomla "gbid" Remote SQL Injection Vulnerability
TYPO3 Extensions Information Disclosure and Injection Vulnerabilities
Debian Security Update Fixes Auth2db SQL Injection Vulnerability
PHP Petition Signing Script Remote SQL Injection Vulnerabilities
Simply Classified "category_id" Parameter SQL Injection Vulnerability
Media Entertainment Script "id" Remote SQL Injection Vulnerability
PHPizabi Remote Code Execution and SQL Injection Vulnerabilities
PHPCMS2008 "q" Parameter Handling Remote SQL Injection Vulnerability
fMoblog Plugin for WordPress "id" Remote SQL Injection Vulnerability
GDL (Gdl Digital Library) "node" Remote SQL Injection Vulnerability
PHPRunner "SearchField" Parameter Remote SQL Injection Vulnerabilities
phpComasy "entry_id" Parameter Remote SQL Injection Vulnerability
Kim Websites "username" Parameter Remote SQL Injection Vulnerability
JogjaCamp JProfile Gold "id_news" Remote SQL Injection Vulnerability
BannerManager "username" and "password" SQL Injection Vulnerability
Newsletter Manager Plus.Attach Remote SQL Injection Vulnerability
PenPal "username" and "password" Remote SQL Injection Vulnerability
XGuestBook "user" Parameter Remote SQL Injection Vulnerability
My_eGallery for MDPro "pid" Remote SQL Injection Vulnerability
taifajobs "jobid" Parameter Handling Remote SQL Injection Vulnerability
SimpleCMMS Multiple Parameter Remote SQL Injection Vulnerabilities
Graugon Forum "id" Parameter Remote SQL Injection Vulnerability
Grestul Username and Password Remote SQL Injection Vulnerability
MemHT Portal "deletenewpm" and "deletepm" SQL Injection Vulnerabilities
PowerMovieList SQL Injection and Cross Site Scripting Vulnerabilities
Graugon Gallery SQL Injection and Cross Site Scripting Vulnerabilities
Fluorine Halite "id" Parameter Remote SQL Injection Vulnerability
BlueBird "username" and "passwd" Remote SQL Injection Vulnerabilities
MyNews "username" and "passwd" Remote SQL Injection Vulnerabilities
Auth PHP "username" and "passwd" Remote SQL Injection Vulnerabilities
PHP Director "searching" Parameter Remote SQL Injection Vulnerability
A Better Member-Based ASP Photo Gallery SQL Injection Vulnerability
BusinessSpace "id" Parameter Remote SQL Injection Vulnerability
w3bcms Multiple Parameter Remote SQL Injection Vulnerabilities
IF-CMS "id" Parameter Handling Remote SQL Injection Vulnerability
CafeEngine "catid" Parameter Remote SQL Injection Vulnerability
ProFTPD Data Processing Remote SQL Injection Vulnerability
Fedora Security Update Fixes GLPI Multiple SQL Injection Vulnerabilities
Chipmunk Blog "username" Remote SQL Injection Vulnerability
GameScript Remote SQL Injection and Local File Inclusion Vulnerabilities
Community CMS "id" Parameter Remote SQL Injection Vulnerability
Max.Blog "id" Parameter Handling Remote SQL Injection Vulnerability
SHOP-INET "grid" Parameter Remote SQL Injection Vulnerability
Flash Magazine Deluxe for Joomla Remote SQL Injection Vulnerability
ClickAuction "txtEmail" Parameter Remote SQL Injection Vulnerability
Groone GLinks "cat" Parameter Remote SQL Injection Vulnerability
Wazzum Dating Software "userid" Remote SQL Injection Vulnerability
PHP-CMS "username" Parameter Remote SQL Injection Vulnerability
Gempar Script Toko Online "cat_id" Remote SQL Injection Vulnerability
E-ShopSystem Multiple Parameter Remote SQL Injection Vulnerabilities
ITLPoll "id" Parameter Handling Remote SQL Injection Vulnerability
Mod-auth-mysql Data Processing Remote SQL Injection Vulnerability
Portfol Component for Joomla "vcatid" SQL Injection Vulnerability
SocialEngine "classifiedcat_id" Parameter SQL Injection Vulnerability
Kroax for PHP-Fusion "comment_id" Parameter SQL Injection Vulnerability
Weight Loss Recipe Book "admin-login.php" SQL Injection Vulnerability
BKWorks ProPHP Username Remote SQL Injection Vulnerability
phpMDJ "id_animateur" Parameter Remote SQL Injection Vulnerability
DZcms "pcat" Parameter Handling Remote SQL Injection Vulnerability
Fast Guest Book "uname" Parameter Remote SQL Injection Vulnerability
PHP Auction System SQL Injection and Cross Site Scripting Vulnerabilities
Phoca Documentation for Joomla Remote SQL Injection Vulnerability
Na_newsdescription for Joomla Remote SQL Injection Vulnerability
plx Autoreminder "id" Parameter Remote SQL Injection Vulnerability
PhpMesFilms "id" Parameter Remote SQL Injection Vulnerability
WSN Guest "search" Parameter Remote SQL Injection Vulnerability
webSPELL "id" Parameter Handling Remote SQL Injection Vulnerability
GForge "create()" Comment Handling Remote SQL Injection Vulnerability
StormBoard "id" Parameter Handling Remote SQL Injection Vulnerability
Low Cost Hotels for Joomla "id" Parameter SQL Injection Vulnerability
Joomla Hotel Booking "id" Parameter SQL Injection Vulnerability
TYPO3 Extensions Cross Site Scripting and SQL Injection Vulnerabilities
WEC Discussion for TYPO3 Cross Site Scripting and SQL Injection Issues
Fedora Security Update Fixes Drupal-Views SQL Injection Vulnerability
Citrix Application Gateway Management Interface SQL injection Issue
PHP TV Portal "mid" Parameter Remote SQL Injection Vulnerability
ActiveVotes "AccountID" Parameter Remote SQL Injection Vulnerability
Active Web Mail "TabOpenQuickTab1" SQL Injection Vulnerability
Active Bids "ItemID" Parameter Remote SQL Injection Vulnerability
Lito Lite CMS "cid" Parameter Remote SQL Injection Vulnerability
Active Test "QuizID" Parameter Remote SQL Injection Vulnerabilities
Active Web Helpdesk Multiple Remote SQL Injection Vulnerabilities
Active Photo Gallery "username" and "password" SQL Injection Issue
Active Price Comparison Multiple Parameter SQL Injection Vulnerabilities
Active Time Billing "username" and "password" SQL Injection Vulnerability
Active Business Directory "catid" Remote SQL Injection Vulnerability
KTP Computer Customer Database CMS Multiple Vulnerabilities
minimal-ablog SQL Injection and File Upload Vulnerabilities
WebStudio CMS "pageid" Remote SQL Injection Vulnerability
CMS Ortus "City" Parameter Remote SQL Injection Vulnerability
Post Affiliate Pro "umprof_status" Remote SQL Injection Vulnerability
ParsBlogger "wr" Parameter Handling Remote SQL Injection Vulnerability
Star Articles Multiple Script Remote SQL Injection Vulnerabilities
PHP-Fusion "subject" Parameter Remote SQL Injection Vulnerability
Vlog System "note" Parameter Remote SQL Injection Vulnerability
Prozilla Hosting Index "id" Remote SQL Injection Vulnerability
NetArt Media Cars Portal "id" Remote SQL Injection Vulnerability
NetArt Media Blog System "id" Remote SQL Injection Vulnerability
PG Real Estate Solution "login_lg" Remote SQL Injection Vulnerability
PG Roomate Finder Solution "login_lg" SQL Injection Vulnerability
PG Job Site "poll_view_id" Remote SQL Injection Vulnerability
Pre Job Board "Username" and "Password" SQL Injection Vulnerabilities
W3matter RevSense and AskPert SQL Injection Vulnerability
MauryCMS "c" Parameter Handling Remote SQL Injection Vulnerability
MyTopix "send" Parameter Remote SQL Injection Vulnerability
ClipShare "chid" Parameter Remote SQL Injection Vulnerability
PHPStore Yahoo Answers "id" Remote SQL Injection Vulnerability
Flosites Blog "cat" and "category" Remote SQL Injection Vulnerabilities
PHPStore Wholesale "id" Parameter Remote SQL Injection Vulnerability
Quick Poll Script "id" Parameter Remote SQL Injection Vulnerability
AlstraSoft Article Manager Pro "username" SQL Injection Vulnerability
ActiveCampaign TrioLive "department_id" SQL Injection Vulnerability
Contact Info "catid" Parameter Remote SQL Injection Vulnerability
Pre Real Estate Listings SQL Injection and File Upload Vulnerabilities
Catalog Production for Joomla "id" Remote SQL Injection Vulnerability
PozScripts Business Directory Script "cid" SQL Injection Vulnerability
AJ Square Free Polling Script "ques" Remote SQL Injection Vulnerability
JooBlog Component for Joomla "PostID" SQL Injection Vulnerability
DeltaScripts PHP Classifieds "siteid" Remote SQL Injection Vulnerability
E-topbiz Online Store "cat_id" Parameter SQL Injection Vulnerability
Domain Seller Pro "id" Parameter Remote SQL Injection Vulnerability
EasyBookMarker Multiple Parameter SQL Injection Vulnerabilities
V3 Chat Profiles/Dating Script Multiple Unauthorized Access Vulnerabilities
DigiAffiliate Administrative Interface Remote SQL Injection Vulnerability
Mole Group Airline Ticket Sale Script "Name" SQL Injection Vulnerability
ExoPHPDesk "user" Parameter Remote SQL Injection Vulnerability
ZEEMATRI "adid" Parameter Remote SQL Injection Vulnerability
Openfire Remote SQL Injection and Cross Site Scripting Vulnerabilities
E-topbiz Slide Popups "passfromform" SQL Injection Vulnerability
E-topbiz Domain Shop "passfromform" SQL Injection Vulnerability
Mole Group Taxi Calc Dist Script "email" SQL Injection Vulnerability
Mole Group Airline Ticket Sale Script "flight" SQL Injection Vulnerability
Pre Real Estate Listings "username1" SQL Injection Vulnerability
HarlandScripts drinks "recid" Parameter SQL Injection Vulnerability
Pre Job Board "aid" Parameter Remote SQL Injection Vulnerability
Pre Simple CMS "user" Parameter Remote SQL Injection Vulnerability
PHP Auto Listings Script "itemno" Remote SQL Injection Vulnerability
Pre Podcast Portal "id" Parameter Remote SQL Injection Vulnerability
Shahrood "id" Parameter Handling Remote SQL Injection Vulnerability
Downline Goldmine Builder "id" Remote SQL Injection Vulnerability
Downline Goldmine Category Addon "id" SQL Injection Vulnerability
Downline Goldmine paidversion "id" Remote SQL Injection Vulnerability
Downline Goldmine newdownlinebuilder "id" SQL Injection Vulnerability
YourFreeWorld Programs Rating "id" Remote SQL Injection Vulnerability
YourFreeWorld Downline Builder "id" Remote SQL Injection Vulnerability
YourFreeWorld Banner Management "id" SQL Injection Vulnerability
YourFreeWorld Blog Blaster "id" Remote SQL Injection Vulnerability
YourFreeWorld Autoresponder Hosting "id" SQL Injection Vulnerability
YourFreeWorld Forced Matrix "id" Remote SQL Injection Vulnerability
YourFreeWorld Short Url & Url Tracker "id" SQL Injection Vulnerability
YourFreeWorld Viral Marketing "id" SQL Injection Vulnerability
YourFreeWorld Scrolling Text Ads "id" SQL Injection Vulnerability
YourFreeWorld Reminder Service "id" SQL Injection Vulnerability
YourFreeWorld Classifieds Blaster "id" SQL Injection Vulnerability
YourFreeWorld Classifieds "category" SQL Injection Vulnerability
YourFreeWorld Shopping Cart "c" Remote SQL Injection Vulnerability
NetRisk Remote SQL Injection and Cross Site Scripting Vulnerabilities
Maran PHP Shop "id" Parameter Remote SQL Injection Vulnerability
1st News "id" Parameter Handling Remote SQL Injection Vulnerability
deV!Lz Clanportal "users" Parameter Remote SQL Injection Vulnerability
Harlandscripts Pro Traffic One "trg" Remote SQL Injection Vulnerability
Venalsur On-line Booking Centre "OfertaID" SQL Injection Vulnerability
Pro Traffic One "id" Parameter Handling SQL Injection Vulnerability
PersianBB "id" Parameter Handling Remote SQL Injection Vulnerability
Alternate Profiles for e107 "id" Parameter SQL Injection Vulnerability
Persia BME E-Catalogue "q" Parameter SQL Injection Vulnerability
Kasra CMS "shme" and "cont" Remote SQL Injection Vulnerabilities
PozScripts Classified Auctions "id" SQL Injection Vulnerability
SFS Forum "id" Parameter Handling Remote SQL Injection Vulnerability
MyForum "id" Parameter Handling Remote SQL Injection Vulnerability
Private Messaging Component for Limbo SQL Injection Vulnerability
ShopMaker "id" Parameter Remote SQL Injection Vulnerability
TYPO3 Extensions SQL Injection and Cross Site Scripting Vulnerabilities
Zeeproperty "adid" Parameter Remote SQL Injection Vulnerability
Meeting Room Booking System "area" SQL Injection Vulnerabilities
miniBloggie "post_id" Parameter Remote SQL Injection Vulnerability
e107 "ue" Parameter Handling Remote SQL Injection Vulnerability
DS-Syndicate Component for Joomla SQL Injection Vulnerability
Nice Talk Component for Joomla "tagid" SQL Injection Vulnerability
iGaming CMS "keywords" Remote SQL Injection Vulnerability
Arcadem Pro "articlecat" Parameter SQL Injection Vulnerability
PG Matchmaking Script "id" Parameter SQL Injection Vulnerabilities
Atomic Photo Album "apa_album_ID" SQL Injection Vulnerability
WSN Links Free "id" Parameter Remote SQL Injection Vulnerability
Fez "parent_id" Parameter Remote SQL Injection Vulnerability
MyFWB "page" Parameter Remote SQL Injection Vulnerability
Basic PHP Events Lister "id" Parameter SQL Injection Vulnerability
MapCal "id" Parameter Handling Remote SQL Injection Vulnerability
Mailhandler Module for Drupal Remote SQL Injection Vulnerability
E-Php CMS "es_id" Parameter Remote SQL Injection Vulnerability
Addalink Remote SQL Injection and Security Bypass Vulnerabilities
vbLOGIX Tutorials "cat_id" Remote SQL Injection Vulnerability
Ruby on Rails ":limit" and ":offset" SQL Injection Vulnerabilities
iBoutique "cat" Parameter Remote SQL Injection Vulnerability
WebPortal "aid" Parameter Remote SQL Injection Vulnerability
pForum "id" Parameter Handling Remote SQL Injection Vulnerability
phpVID Cross Site Scripting and SQL Injection Vulnerabilities
Zanfi Autodealers CMS AutOnline Remote SQL Injection Vulnerability
MemHT Portal "stats_res" Parameter Remote SQL Injection Vulnerability
Masir Camp E-Shop Module "ordercode" SQL Injection Vulnerability
Altrasoft Forum "cat" Parameter Remote SQL Injection Vulnerability
E-Php Shopping Cart Script "cid" Remote SQL Injection Vulnerability
Invision Power Board "name" Remote SQL Injection Vulnerability
Debian Security Update Fixes Slash Input Validation Vulnerabilities
Reciprocal Links Manager "site" Remote SQL Injection Vulnerability
myPHPNuke "artid" Parameter Remote SQL Injection Vulnerability
BLOG Engine Plugin for e107 Remote SQL Injection Vulnerability
PHPBasket "pro_id" Parameter Remote SQL Injection Vulnerability
phpArcadeScript "cat" Parameter Remote SQL Injection Vulnerability
DeeEmm CMS Remote File Inclusion and SQL Injection Vulnerabilities
ZeeReviews "ItemID" Parameter SQL Injection Vulnerability
Article Friendly Standard "autid" Parameter SQL Injection Vulnerability
Article Friendly Pro "Cat" Parameter SQL Injection Vulnerability
PozScripts Classified Ads Script "cid" Remote SQL Injection Vulnerability
TubeGuru "UID" Parameter Remote SQL Injection Vulnerability
EMC Centera Universal Access Remote SQL Inection Vulnerability
Getacoder Clone "sb_protype" Parameter SQL Injection Vulnerability
GC Auction Platinum "cate_id" Parameter SQL Injection Vulnerability
SiteAdmin CMS "art" Parameter Remote SQL Injection Vulnerability
Pligg "id" Parameter Handling Remote SQL Injection Vulnerability
Owl "username" Parameter Remote SQL Injection Vulnerability
Youtuber Clone "UID" Parameter Remote SQL Injection Vulnerability
ViArt Shop "category_id" Parameter SQL Injection Vulnerability
BizDirectory Multiple SQL Injection and Cross Site Scripting Vulnerabilities
EasyPublish SQL Injection and Cross Site Scripting Vulnerabilities
EasyCards Remote SQL Injection and Cross Site Scripting Vulnerabilities
EasyDynamicPages SQL Injection and Cross Site Scripting Issues
ShopcartDX "pid" Parameter Remote SQL Injection Vulnerability
MojoAuto "cat_a" Parameter Remote SQL Injection Vulnerability
MojoJobs "cat_a" Parameter Remote SQL Injection Vulnerability
MojoPersonals "cat" Parameter Remote SQL Injection Vulnerability
MojoClassifieds "cat_a" Parameter Remote SQL Injection Vulnerability
HRS Multi "key" Parameter Remote SQL Injection Vulnerability
DigiLeave "book_id" Parameter Remote SQL Injection Vulnerability
AlstraSoft Affiliate Network Pro "pgm" Remote SQL Injection Vulnerability
tplSoccerSite Multiple Parameter Remote SQL Injection Vulnerabilities
ITechBids Gold Cross Site Scripting and SQL Injection Vulnerabilities
DreamNews "id" Parameter Remote SQL Injection Vulnerability
Lastminute Script "cid" Parameter Remote SQL Injection Vulnerability
SmartPPC Pay Per Click Script "idDirectory" SQL Injection Vulnerability
Online Booking Manager "id" Remote SQL Injection Vulnerability
beamospetition for Joomla "pet" Remote SQL Injection Vulnerability
Xe webtv Component for Joomla "id" Remote SQL Injection Vulnerability
SebracCMS "uname" and "recid" Remote SQL Injection Vulnerabilities
AcmlmBoard "pow" Parameter Remote SQL Injection Vulnerability
eSHOP100 "SUB" Parameter Remote SQL Injection Vulnerability
MyPHP CMS "pid" Parameter Remote SQL Injection Vulnerability
Jokes and Funny Pics Script "sbjoke_id" SQL Injection Vulnerability
Webdevindo-CMS "hal" Parameter Remote SQL Injection Vulnerability
Netinvoice Component for Joomla "cid" SQL Injection Vulnerability
Relative Real Estate Systems "listing_id" SQL Injection Vulnerability
shareCMS "eventID" and "userID" Remote SQL Injection Vulnerabilities
DUware DUcalendar "iEve" Parameter SQL Injection Vulnerability
Hivemaker "cid" Parameter Remote SQL Injection Vulnerability
ViralDX "bannerid" Parameter Remote SQL Injection Vulnerability
Link ADS "linkid" Parameter Remote SQL Injection Vulnerability
TOKOKITA Multiple Parameter Remote SQL Injection Vulnerabilities
Battle Blog "Entry" Parameter Remote SQL Injection Vulnerability
JooBlog Component for Joomla "CategoryID" SQL Injection Vulnerability
CKGold "item_id" Parameter Remote SQL Injection Vulnerability
RevokeBB "search" Parameter Remote SQL Injection Vulnerability
ClassSystem "teacher_id" Parameter Remote SQL Injection Vulnerability
Simpel Side Netbutik Multiple Remote SQL Injection Vulnerabilities
6rbScript "newsid" Parameter Remote SQL Injection Vulnerability
Maxsite "category" Parameter Remote SQL Injection Vulnerability
RoomPHPlanning "idresa" Parameter Remote SQL Injection Vulnerability
Xomol CMS SQL Injection and Local File Inclusion Vulnerabilities
ComicShout "comic_id" Parameter Remote SQL Injection Vulnerability
MX-System "page" Parameter Remote SQL Injection Vulnerability
PHP-Jokesite "cat_id" Parameter Remote SQL Injection Vulnerability
Netious CMS "pageid" Parameter Remote SQL Injection Vulnerability
How2ASP Webboard "qNo" Remote SQL Injection Vulnerability
FicHive "category" Parameter Remote SQL Injection Vulnerability
CMS WebManager-Pro Multiple Remote SQL Injection Vulnerabilities
TAGWORX.CMS Multiple Remote SQL Query Injection Vulnerabilities
EMO Realty Manager "ida" Parameter SQL Injection Vulnerability
The Real Estate Script "docID" Parameter SQL Injection Vulnerability
Links Pile "cat_id" Parameter Remote SQL Injection Vulnerability
phpDirectorySource Multiple Remote SQL Injection Vulnerabilities
cpLinks Remote SQL Injection and Cross Site Scripting Vulnerabilities
PHP Forge "id" Parameter Remote SQL Query Injection Vulnerability
Angelo Emlak SQL Injection and Cross Site Scripting Vulnerabilities
Filiale for Joomla "idFiliale" Parameter SQL Injection Vulnerability
E-RESERV "ID_loc" Parameter Remote SQL Injection Vulnerability
Spreadsheet for WordPress "ss_id" Remote SQL Injection Vulnerability
Web Calendar "user_id" Parameter Remote SQL Injection Vulnerability
FlippingBook Joomla Component "book_id" SQL Injection Vulnerability
Philboard W1L3D4 "id" Parameter Remote SQL Injection Vulnerability
Apartment Search Script "r" Parameter SQL Injection Vulnerability
Tr Script News "nb" Parameter Remote SQL Injection Vulnerability
PHP-Fusion "submit_info" Array Remote SQL Injection Vulnerability
BlogWorx "id" Parameter Handling Remote SQL Injection Vulnerability
Crazy Goomba "id" Parameter Remote SQL Injection Vulnerability
XplodPHP AutoTutorials "id" Parameter SQL Injection Vulnerability
dream4 Koobi Pro "poll_id" Parameter SQL Injection Vulnerability
Classifieds Caffe "cat_id" Parameter Remote SQL Injection Vulnerability
Lasernet CMS "new" Parameter Remote SQL Injection Vulnerability
Mumbo Jumbo Media "id" Parameter Remote SQL Injection Vulnerability
Pligg "id" Parameter Handling Remote SQL Injection Vulnerability
SuperNET Shop Multiple Parameter Remote SQL Injection Vulnerabilities
Prediction Football "matchid" Parameter SQL Injection Vulnerability
724CMS "ID" Parameter Handling Remote SQL Injection Vulnerability
My Gaming Ladder Combo System "ladderid" SQL Injection Vulnerability
iScripts SocialWare "id" Parameter Remote SQL Injection Vulnerability
PIGMy-SQL "id" Parameter Remote SQL Query Injection Vulnerability
Links Directory "cat_id" Parameter Remote SQL Injection Vulnerability
Software Index "cid" Parameter Remote SQL Injection Vulnerability
Site Sift Listings "id" Parameter Remote SQL Injection Vulnerability
Prozilla Cheat Script "id" Parameter Remote SQL Injection Vulnerability
JGS-Treffen "view_id" Parameter Remote SQL Injection Vulnerability
Neat weblog "articleId" Parameter Remote SQL Injection Vulnerability
phpBP "id" Parameter Processing Remote SQL Injection Vulnerability
Dictionary Module for Xoops "id" Parameter SQL Injection Vulnerability
Mitra Informatika Solusindo Cart "p" Remote SQL Injection Vulnerability
Clasifier Component for Joomla "cat_id" SQL Injection Vulnerability
MyAnnonces Module for Runcms "cid" Remote SQL Injection Vulnerability
Photo Album Plugin for WordPress Multiple SQL Injection Vulnerabilities
Cisco Unified Communication Manager "key" SQL Injection Vulnerability
ibProArcade "g_display_order" Remote SQL Injection Vulnerability
WassUp Plugin for WordPress "to_date" SQL Injection Vulnerability
AdServe Plugin for WordPress "id" Parameter SQL Injection Vulnerability
EstateAgent Component for Mambo "objid" SQL Injection Vulnerability
Jokes Component for Mambo "cat" SQL Query Injection Vulnerability
Recipes Component for Mambo "id" SQL Query Injection Vulnerability
Buslicense Component for Mambo "aid" SQL Query Injection Vulnerability
Musepoes Component for Mambo "aid" SQL Query Injection Vulnerability
Glossary Component for Mambo "catid" SQL Query Injection Vulnerability
MaMML Component for Mambo "listid" SQL Query Injection Vulnerability
Fq Multicorreos Component for Mambo "listid" SQL Injection Vulnerability
Newsletter Component for Mambo "listid" SQL Injection Vulnerability
Bigware Shop "pollid" Parameter Handling SQL Injection Vulnerability
fGallery Plugin for WordPress "album" SQL Query Injection Vulnerability
WP-Cal Plugin for WordPress "id" SQL Query Injection Vulnerability
phpIP Management Multiple Parameter Remote SQL Injection Issues
CandyPress Store SQL Injection and Cross Site Scripting Vulnerabilities
Flinx "id" Parameter Handling Remote SQL Query Injection Vulnerability
Tiger Php News System "catid" Parameter SQL Injection Vulnerability
PHP-Nuke Search Module "sid" Parameter SQL Injection Vulnerability
aflog Remote SQL Query Injection and Cross Site Scripting Vulnerabilities
WP-Forum Plugin for WordPress "user" SQL Query Injection Vulnerability
AlstraSoft Forum Pay Per Post Exchange "catid" SQL Injection Issue
boastMachine "id" Parameter Processing SQL Injection Vulnerability
Mooseguy Blog System "month" Parameter SQL Injection Vulnerability
bloofoxCMS Remote SQL Injection and Directory Traversal Vulnerabilities
360 Web Manager "IDFM" Parameter SQL Query Injection Vulnerability
Pragmatic Utopia PU Arcade for Joomla "fid" SQL Injection Vulnerability
Aeries Browser Interface "EmailAddress" SQL Query Injection Vulnerability
Woltlab Burning Board Lite "search.php" SQL Injection Vulnerabilities
TYPO3 "indexed_search" System Extension SQL Injection Vulnerability
SH-News "id" Parameter Processing Remote SQL Injection Vulnerability
DWdirectory "search" Parameter Remote SQL Injection Vulnerability
Ace Image Hosting Script "id" Parameter SQL Query Injection Vulnerability
Content Injector "id" Parameter Remote SQL Query Injection Vulnerability
WordPress "s" Parameter Handling Remote SQL Injection Vulnerability
Fedora Security Update Fixes Drupal Multiple Module Vulnerabilities
Dora Emlak Multiple Parameter Remote SQL Query Injection Vulnerabilities
WorkingOnWeb "idevent" Parameter Remote SQL Injection Vulnerability
Irola My-Time "login" and "password" Parameters SQL Injection Issues
PHPKIT "contentid" Parameter Remote SQL Query Injection Vulnerability
Content Injector "cat" Parameter Remote SQL Injection Vulnerability
Vu Case Manager "username" and "password" SQL Injection Vulnerability
VU Mass Mailer "password" Parameter Remote SQL Injection Vulnerability
AlstraSoft E-Friends "seid" Parameter Remote SQL Injection Vulnerability
Cacti "local_graph_id" Parameter Remote SQL Query Injection Vulnerability
ProfileCMS "id" Parameter Processing Remote SQL Injection Vulnerability
Toko Instan "id" and "katid" Parameters SQL Injection Vulnerabilities
phpMyAdmin Database Name SQL Injection and Cross Site Scripting
Aspee Ziyaretçi Defteri "kullanici" and "parola" Remote SQL Injection Vulnerabilities
Debian Security Update Fixes Zoph Remote SQL Injection Vulnerability
Simple Machines Forum Multiple Parameter SQL Injection Vulnerabilities
Vanilla "CategoryID" Parameter Processing SQL Injection Vulnerabilities
Aleris Web Publishing Server "mode" Remote SQL Injection Vulnerability
E-Vendejo "id" Parameter Handling Remote SQL Injection Vulnerability
JobSite Professional "id" Parameter Remote SQL Injection Vulnerability
emagiC CMS "pageId" Parameter Remote SQL Injection Vulnerability
Drupal Cross Site Scripting and Information Disclosure Vulnerabilities
Oracle Products Multiple Code Execution and SQL Injection Vulnerabilities
Softbiz Recipes Portal "sbcat_id" Remote SQL Query Injection Vulnerability
KwsPHP "album" Parameter Processing SQL Query Injection Vulnerability
cpDynaLinks "category" Parameter Processing SQL Injection Vulnerability
LedgerSMB "invoice quantity" and "sort" Fields SQL Injection Vulnerabilities
Softbiz Jobs and Recruitment Script "cid" SQL Query Injection Vulnerability
PHP Homepage M "id" Parameter Remote SQL Query Injection Vulnerability
X-script GuestBook Multiple Parameter Remote SQL Injection Vulnerabilities
ASP Product Catalog "cid" Parameter Remote SQL Injection Vulnerability
Expanded Calendar for PHP-Fusion "sel" SQL Query Injection Vulnerability
Netkamp Emlak Scripti SQL Injection and Cross Site Scripting Vulnerabilities
Ohesa Emlak Portali "Kategori" and "Emlak" SQL Injection Vulnerabilities
NukeScripts NukeSentinel "write_ban()" Remote SQL Injection Vulnerability
phpFullAnnu "mod" Parameter Processing Remote SQL Injection Vulnerability
Black Lily "class" Parameter Processing Remote SQL Injection Vulnerability
Clansphere "cat_id" Parameter Handling Remote SQL Injection Vulnerability
Gelato "post" Parameter Processing Remote SQL Injection Vulnerability
JBlog "id" Parameter Processing Remote SQL Query Injection Vulnerability
PHP Webquest "id_actividad" Parameter Remote SQL Injection Vulnerability
GForge "skill_delete" Parameter Handling Remote SQL Injection Vulnerability
KwsPHP Jeuxflash Module "id" Parameter Remote SQL Injection Vulnerability
TLM CMS Multiple Parameter Processing Remote SQL Injection Vulnerabilities
Wordpress Multiple Parameter Cross Site Scripting and SQL Injection Issues
PSI Social Networking Script "u" Parameter Remote SQL Injection Vulnerability
Yvora CMS "ID" Parameter Handling Remote SQL Query Injection Vulnerability
CKGold "category_id" Parameter Processing SQL Query Injection Vulnerability
NeoRecruit Component for Joomla "id" Parameter SQL Injection Vulnerability
PHD Help Desk Unspecified Parameter Remote SQL Injection Vulnerability
phpns "id" Parameter Processing Remote SQL Query Injection Vulnerability
ABC eStore "cat_id" Parameter Handling Remote SQL Injection Vulnerability
NMDeluxe "id" Parameter Handling Remote SQL Query Injection Vulnerability
Cisco CallManager Multiple Cross Site Scripting and SQL Injection Vulnerabilities
Next Gen Portfolio Manager "Users_Email" and "Users_Password" SQL Injection
GMaps Component for Joomla "mapId" Remote SQL Query Injection Vulnerability
WolioCMS "id" and "loginid" Parameters Remote SQL Injection Vulnerabilities
SuskunDuygular Uyelik Sistemi "kadi" and "email" SQL Injection Vulnerability
Metyus Forum Portal "forumid" Parameter Remote SQL Injection Vulnerability
IndexScript "cat_id" Parameter Processing Remote SQL Injection Vulnerability
Adult Directory "cat_id" Parameter Remote SQL Query Injection Vulnerability
SimpleBlog "id" Parameter Processing Remote SQL Query Injection Vulnerability
Php123 Top Sites "cat" Parameter Remote SQL Query Injection Vulnerability
LinPHA "order" Parameter Processing Remote SQL Query Injection Vulnerability
Pony Gallery Random Image for Joomla "catid" Remote SQL Injection Vulnerability
WSN Links Basic Edition "catid" Parameter Remote SQL Injection Vulnerability
bwired "newsID" Parameter Processing Remote SQL Query Injection Vulnerability
phpMyForum "editpost.php" Unspecified Parameter SQL Injection Vulnerability
BlogSite Professional "news_id" Parameter Remote SQL Injection Vulnerability
Dora Emlak "default.asp" Multiple SQL Injection and Cross Site Scripting Issues
husrevforum Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
eSyndiCat Directory Software "id" and "name" Remote SQL Injection Vulnerabilities
MzK Blog "katID" Parameter Processing Remote SQL Query Injection Vulnerability
Realtor 747 "categoryid" Parameter Processing SQL Query Injection Vulnerability
Hitachi JP1/NETM/DM Manager Unspecified Remote SQL Injection Vulnerability
enVivo!CMS "ID" Parameter Processing Remote SQL Query Injection Vulnerability
OpenLD "id" Parameter Processing Remote SQL Query Injection Vulnerability
Aigaion "topic_id" Parameter Processing Remote SQL Query Injection Vulnerability
Webmatic Security Update Fixes Multiple Remote SQL Query Injection Vulnerabilities
FlashGameScript "user" Parameter Handling Remote SQL Injection Vulnerability
GameSiteScript "params" Parameter Handling Remote SQL Injection Vulnerability
eMeeting Dating Software "id" Parameter Handling Remote SQL Injection Vulnerability
Vastal I-Tech phpVID "cat" Parameter Processing Remote SQL Injection Vulnerability
Girlserv Ads "idnew" Parameter Processing Remote SQL Query Injection Vulnerability
PPhlogger "username" Parameter Processing Remote SQL Injection Vulnerability
SuperCali PHP Event Calendar "o" Parameter Remote SQL Injection Vulnerability
PHP Director "id" Parameter Processing Remote SQL Query Injection Vulnerability
AV Arcade "id" and "ava_userid" Parameters Remote SQL Injection Vulnerabilities
Easybe 1-2-3 Music Store "CategoryID" Parameter Remote SQL Injection Vulnerability
Wheatblog "wb_class_dir" File Inclusion and "login" SQL Query Injection Vulnerabilities
phpEventCalendar "id" Parameter Processing Remote SQL Injection Vulnerability
TotalCalendar "id" Parameter Processing Remote SQL Query Injection Vulnerability
Youtube Clone "id" Parameter Processing Remote SQL Query Injection Vulnerability
eDocStore "doc_id" Parameter Processing Remote SQL Query Injection Vulnerability
6ALBlog Multiple Parameter Processing Remote SQL Query Injection Vulnerabilities
phpTrafficA "pageid" and "lang" SQL Injection and Local File Inclusion Vulnerabilities
Simple Invoices "submit" Parameter Processing Remote SQL Injection Vulnerability
Jasmine CMS Local File Inclusion and Remote SQL Query Injection Vulnerabilities
WSPortal "page" Parameter Processing Remote SQL Query Injection Vulnerability
Utopia News Pro "password" Parameter Processing Cross Site Scripting Vulnerability
GeometriX Download Portal "id" Parameter Remote SQL Query Injection Vulnerability
e-Vision CMS Multiple Parameter SQL Injection and Local File Inclusion Vulnerabilities
WordPress XML-RPC Interface "wp_suggestCategories()" SQL Injection Vulnerability
Free PayPal Shopping Cart "news_id" Parameter Remote SQL Injection Vulnerability
Gaya Design ComicSense "epi" Parameter Remote SQL Query Injection Vulnerability
EQdkp "rank" Parameter Processing Remote SQL Query Injection Vulnerability
Particle Gallery "editcomment" Parameter Handling Remote SQL Injection Vulnerability
RevokeSoft RevokeBB "revokebb_user" Parameter Remote SQL Injection Vulnerability
PNphpBB2 Module for PostNuke "c" Parameter Remote SQL Injection Vulnerability
Zomplog "speler" Parameter Handling Remote SQL Query Injection Vulnerability
WordPress "cookie" Parameter Handling Remote SQL Query Injection Vulnerability
Glossaire Module for Xoops "id" Parameter Remote SQL Query Injection Vulnerability
Resmanager for Xoops "id_reserv" Parameter Remote SQL Query Injection Vulnerability
DGNews Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
My Little Forum "id" Parameter Handling Remote SQL Query Injection Vulnerability
gCards "newsid" Parameter Handling Remote SQL Query Injection Vulnerability
cpCommerce "id_category" Parameter Handling Remote SQL Injection Vulnerability
Dokeos Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
PHPEcho CMS Multiple Parameter Handling Remote SQL Query Injection Vulnerabilities
2z Project "rating" and "post_id" Parameters Handling SQL Injection Vulnerabilities
BtitTracker Multiple Parameter Handling Remote SQL Query Injection Vulnerabilities
SimpNews "newsnr" Parameter Handling Remote SQL Query Injection Vulnerability
RunawaySoft Haber Portal "id" Parameter Handling Remote SQL Injection Vulnerability
ADempiere "insert()" SQL Injection and "canUpdate()" Security Bypass Vulnerabilities
MyConference for Xoops "sid" and "cid" Parameters Remote SQL Injection Vulnerability
SonicBB Multiple Parameter Remote SQL Injection and Cross Site Scripting Vulnerabilities
EfesTECH Haber "id" Parameter Handling Remote SQL Query Injection Vulnerability
W1L3D4 Philboard "forumid" Parameter Handling Remote SQL Injection Vulnerability
BlogMe "var" Parameter Handling Remote SQL Query Injection Vulnerability
eXtrovert Software Thyme "eid" Parameter Remote SQL Query Injection Vulnerability
TaskDriver "username" and "taskid" Parameters Remote SQL Injection Vulnerabilities
WavelinkMedia TutorialCMS Multiple SQL Injection and Cross Site Scripting Issues
SimpleNews "news_id" Parameter Handling Remote SQL Query Injection Vulnerability
WikkaWiki Multiple Information Disclosure and Cross Site Scripting Vulnerabilities
Wfquotes Module for Xoops "c" Parameter Remote SQL Query Injection Vulnerability
RunCms Debug Class "show_queries()" Function Remote SQL Injection Vulnerability
FlashGames Module for Xoops "lid" Parameter Remote SQL Query Injection Vulnerability
Concordia Censura "vendorid" Parameter Remote SQL Query Injection Vulnerability
Pre Classified Listings PHP "category" Parameter Remote SQL Injection Vulnerability
Php Coupon Script "bus" Parameter Handling Remote SQL Query Injection Vulnerability
v4bJournal Module for PostNuke "id" Parameter Remote SQL Injection Vulnerability
CMS Made Simple "templateid" Parameter Remote SQL Query Injection Vulnerability
FileRun Multiple Parameter Remote SQL Injection and Cross Site Scripting Vulnerabilities
Psi-labs Photo Upload Share Script SQL Injection and Profile Manipulation Vulnerabilities
pnFlashGames Module for PostNuke "cid" Parameter SQL Query Injection Vulnerability
CA CleverPath Portal Lite Search Multiple Remote SQL Query Injection Vulnerabilities
EditeurScripts EsForum "idsalon" Parameter Remote SQL Query Injection Vulnerability
Ripe Website Manager "ripeformpost" SQL Injection and Cross Site Scripting Issues
PHPmySpace Gold "item_id" Parameter Handling Remote SQL Injection Vulnerability
MyBB Calendar Module "day" Parameter Handling Remote SQL Injection Vulnerability
Phorum Multiple Parameter Remote SQL Injection and Cross Site Scripting Vulnerabilities
PHP-Nuke Multiple Security Bypass and Remote SQL Query Injection Vulnerabilities
Creascripts Creadirectory "id" Parameter Handling Remote SQL Injection Vulnerability
Oracle Products Multiple Remote Command Execution and SQL Injection Vulnerabilities
Frogss CMS Multiple Parameter Handling Remote SQL Query Injection Vulnerabilities
Quick and Dirty Blog Remote SQL Query Injection and Local File Inclusion Vulnerabilities
Crea-Book "pseudo" and "passe" Parameters Remote SQL Injection Vulnerabilities
AlstraSoft Video Share Enterprise SQL Injection and User Manipulation Vulnerabilities
Battle.net Clan Script for PHP "user" Parameter Remote SQL Injection Vulnerability
SmodCMS "ssid" Parameter Handling Remote SQL Query Injection Vulnerability
SmodBIP "zoom" Parameter Handling Remote SQL Query Injection Vulnerability
Jobs for Xoops "cid" Parameter Handling Remote SQL Query Injection Vulnerability
WF-Links for Xoops "cid" Parameter Handling Remote SQL Query Injection Vulnerability
Rha7 Downloads for Xoops "cid" and "lid" Parameters SQL Query Injection Vulnerabilities
WF-Snippets for Xoops "c" Parameter Handling Remote SQL Injection Vulnerability
HP Mercury Quality Center "RunQuery" Command SQL Query Execution Vulnerability
WordPress "XML-RPC" Module Remote SQL Injection and Security Bypass Vulnerabilities
Kshop for Xoops "id" Parameter Handling Remote SQL Query Injection Vulnerability
Zmagazine for Xoops "articleid" Parameter Handling Remote SQL Injection Vulnerability
XFsection for Xoops "articleid" Parameter Handling Remote SQL Injection Vulnerability
WFSection for Xoops "articleid" Parameter Handling Remote SQL Injection Vulnerability
PopnupBlog for Xoops "postid" Parameter Handling SQL Query Injection Vulnerability
Arcade for PHP-Fusion "cid" Parameter Handling Remote SQL Injection Vulnerability
Topliste for PHP-Fusion "cid" Parameter Handling Remote SQL Injection Vulnerability
myAlbum-P for Xoops "cid" Parameter Handling Remote SQL Injection Vulnerability
Camportail for Xoops "camid" Parameter Handling Remote SQL Injection Vulnerability
Expanded Calendar for PHP-Fusion "m_month" Parameter SQL Injection Vulnerability
Lykos Reviews Module for Xoops "uid" Parameter Handling SQL Injection Vulnerability
FriendFinder for Xoops "id" Parameter Handling Remote SQL Injection Vulnerability
FlexBB "flexbb_lang_id" Cookie Parameter Handling Remote SQL Injection Vulnerability
D4J eZine Module for Joomla "article" Parameter Remote SQL Injection Vulnerability
Articles Module for Xoops "id" Parameter Handling Remote SQL Injection Vulnerability
IceBB Avatar Handling Remote SQL Injection and Arbitrary File Upload Vulnerabilities
RWCards for Mambo "category_id" Parameter Remote SQL Query Injection Vulnerability
Webformatique Car Manager "id" Parameter Remote SQL Query Injection Vulnerability
eWebquiz "QuizID" Parameter Handling Remote SQL Query Injection Vulnerability
Active Newsletter "NewsPaperID" Parameter Remote SQL Query Injection Vulnerability
Active Auction Pro "catid" Parameter Handling Remote SQL Query Injection Vulnerability
Active Buy and Sell "catid" Parameter Handling Remote SQL Query Injection Vulnerability
Active Trade "catid" Parameter Handling Remote SQL Query Injection Vulnerability
aspWebCalendar "eventid" Parameter Handling Remote SQL Injection Vulnerability
PHPX Multiple Parameter Remote SQL Injection and Cross Site Scripting Vulnerabilities
Active Photo Gallery "catid" Parameter Handling Remote SQL Query Injection Vulnerability
Active Link Engine "catid" Parameter Handling Remote SQL Query Injection Vulnerability
Web Wiz Forums "formatSQLInput()" Function Remote SQL Query Injection Vulnerability
realGuestbook Multiple Parameter Cross Site Scripting and SQL Injection Vulnerabilities
Minerva "c" Parameter Handling Remote SQL Query Injection Vulnerability
ScriptMagix Lyrics "recid" Parameter Handling Remote SQL Query Injection Vulnerability
Katalog Plyt Audio Multiple Parameter Handling Remote SQL Injection Vulnerabilities
ScriptMagix Photo Rating "phid" Parameter Handling Remote SQL Injection Vulnerability
ScriptMagix Recipes "catid" Parameter Handling Remote SQL Query Injection Vulnerability
ScriptMagix Jokes "catid" Parameter Handling Remote SQL Query Injection Vulnerability
ScriptMagix FAQ Builder "catid" Parameter Handling Remote SQL Injection Vulnerability
Particle Blogger "postid" Parameter Handling Remote SQL Query Injection Vulnerability
Php-Stats Multiple Remote SQL Query Injection and Command Execution Vulnerabilities
Absolute Image Gallery "categoryid" Parameter Remote SQL Query Injection Vulnerability
WBBlog "e_id" Parameter Remote SQL Injection and Cross Site Scripting Vulnerabilities
WSN Guest "id" Parameter Handling Remote SQL Query Injection Vulnerability
X-ice Haber Sistemi "id" Parameter Handling Remote SQL Query Injection Vulnerability
JGBBS "search.asp" Multiple Parameter Handling Remote SQL Injection Vulnerabilities
BP Blog "layout" Parameter Handling Remote SQL Query Injection Vulnerability
PHP Labs JobSitePro "salary" Parameter Handling Remote SQL Injection Vulnerability
Grayscale Blog Multiple Security Bypass and Remote SQL Query Injection Vulnerabilities
Triexa SonicMailer Pro "list" Parameter Handling Remote SQL Injection Vulnerability
HC Newssystem "ID" Parameter Handling Remote SQL Query Injection Vulnerability
Gazi YapBoz "kategori" Parameter Handling Remote SQL Query Injection Vulnerability
Links Management Application "lcnt" Parameter Remote SQL Injection Vulnerability
AJ Classifieds "postingid" Parameter Handling Remote SQL Query Injection Vulnerability
Tyger Bug Tracking System Multiple SQL Injection and Cross Site Scripting Vulnerabilities
AJDating "user_id" Parameter Handling Remote SQL Query Injection Vulnerability
AJ Forum "td_id" Parameter Handling Remote SQL Query Injection Vulnerability
AJ Auction Pro "cate_id" Parameter Handling Remote SQL Query Injection Vulnerability
Rigter Portal System "categoria" Parameter Handling Remote SQL Injection Vulnerability
ANGEL Learning Management Suite "id" Parameter Remote SQL Injection Vulnerability
LoveCMS Multiple Parameter Handling File Inclusion and SQL Injection Vulnerabilities
ZephyrSoft Toolbox ABC "updateRow()" and "deleteRow()" SQL Injection Vulnerabilities
webSPELL "topic" Parameter Handling Remote SQL Query Injection Vulnerability
Online Web Building "art_id" Parameter Handling Remote SQL Injection Vulnerability
Emporium Module for PHP-Nuke "category_id" Remote SQL Injection Vulnerability
webSPELL "showonly" Parameter Handling Remote SQL Query Injection Vulnerability
XLAtunes "album" Parameter Handling Remote SQL Query Injection Vulnerability
CodeAvalanche News "CAT_ID" Parameter Remote SQL Query Injection Vulnerability
Aktueldownload Script "id" and "kid" Parameters Remote SQL Injection Vulnerabilities
phpCC "npid" Parameter Handling Remote SQL Query Injection Vulnerability
PollMentor "id" Parameter Handling Remote SQL Query Injection Vulnerability
Philboard "forumid" Parameter Handling Remote SQL Query Injection Vulnerability
LightRO CMS "ID" Parameter Handling Remote SQL Query Injection Vulnerability
LushiNews "id" Parameter Handling Remote SQL Query Injection Vulnerability
LushiWarPlaner "id" Parameter Handling Remote SQL Query Injection Vulnerability
Kisisel Site 2007 "forumid" Parameter Remote SQL Query Injection Vulnerability
Woltlab Burning Board Lite "pmid[0]" Parameter Remote SQL Injection Vulnerability
Noname Media Photo Galerie "id" Parameter Remote SQL Query Injection Vulnerability
dB Masters Curium CMS "c_id" Parameter Remote SQL Query Injection Vulnerability
Fullaspsite Asp Hosting Sitesi "kategori_id" Remote SQL Query Injection Vulnerability
EXO PHPDesk "id" Parameter Handling Remote SQL Query Injection Vulnerability
Hunkaray Duyuru Scripti "id" Parameter Handling Remote SQL Injection Vulnerability
CascadianFAQ "catid" and "qid" Parameters Remote SQL Query Injection Vulnerability
MAXdev MD-Pro "startrow" Parameter Handling Remote SQL Injection Vulnerability
X-dev xNews "generate_csv()" Multiple Parameter Handling SQL Injection Vulnerabilities
ACGVannu "id" Parameter Handling Arbitrary User Profile Manipulation Vulnerability
Makit Newsposter Script "uid" Parameter Handling Remote SQL Injection Vulnerability
GPS Content Management System "id" Parameter Remote SQL Injection Vulnerability
ASP EDGE Multiple Parameter Handling Remote SQL Query Injection Vulnerabilities
Planetgraphic ASP News "id" Parameter Handling Remote SQL Injection Vulnerability
Acidfree Module for Drupal Node Title Handling Remote SQL Injection Vulnerability
webSPELL "gallery.php" Multiple Parameter Handling Remote SQL Injection Vulnerabilities
MGB "id" Parameter Handling Remote SQL Query Injection Vulnerability
SmE FileMailer Multiple Parameter Handling Remote SQL Query Injection Vulnerabilities
All In One Control Panel "xuser_name" and "did" Parameters SQL Injection Vulnerabilities
Digiappz DigiAffiliate "id" Parameter Handling Remote SQL Query Injection Vulnerability
MiNT Haber Sistemi "id" Parameter Handling Remote SQL Query Injection Vulnerability
MOTIONBORG Web Real Estate "txtUserName" Parameter SQL Injection Vulnerability
@lex Guestbook "lang" Parameter Handling Remote SQL Query Injection Vulnerability
ShopStoreNow "CatID" Parameter Handling Remote SQL Query Injection Vulnerability
Kolayindir Download "id" Parameter Handling Remote SQL Query Injection Vulnerability
iG Shop Multiple Parameter Remote Code Execution and SQL Injection Vulnerabilities
iG Calendar "id" Parameter Handling Remote SQL Query Injection Vulnerability
DigiRez "book_id" Parameter Handling Remote SQL Query Injection Vulnerability
Locazolist Classifieds "subcatID" Parameter Remote SQL Query Injection Vulnerability
Simple Web Content Management System "id" Parameter SQL Injection Vulnerability
E-SMART CART "product_id" Parameter Handling Remote SQL Injection Vulnerability
autoDealer "iPro" Parameter Handling Remote SQL Query Injection Vulnerability
Vizayn Haber "id" Parameter Handling Remote SQL Query Injection Vulnerability
Click -N- Print Coupons "key" Parameter Handling Remote SQL Injection Vulnerability
CMX Acronym Module for phpBB "id" Parameter Remote SQL Injection Vulnerability
ASPTicker "Password" Parameter Handling Remote SQL Query Injection Vulnerability
PWP Classified Ad System "main" Parameter Remote SQL Query Injection Vulnerability
Chatwm "txtUse" and "txtPas" Parameters Handling Remote SQL Injection Vulnerabilities
eNdonesia Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
HLstats "killLimit" Parameter Handling Remote SQL Query Injection Vulnerability
Ananda Real Estate "agent" Parameter Handling Remote SQL Injection Vulnerability
Mxmania File Upload Manager "ID" Parameter Remote SQL Injection Vulnerability
Newsletter MX "ID" Parameter Handling Remote SQL Query Injection Vulnerability
Enthrallweb ePhotos "SUB_ID" Parameter Handling Remote SQL Injection Vulnerability
Enthrallweb ePages "Biz_ID" Parameter Handling Remote SQL Injection Vulnerability
Enthrallweb eMates "ID" Parameter Handling Remote SQL Query Injection Vulnerability
Enthrallweb eJobs "ID" Parameter Handling Remote SQL Query Injection Vulnerability
Enthrallweb eCars "Type_id" Parameter Handling Remote SQL Injection Vulnerability
Dragon Business Directory "ID" Parameter Handling Remote SQL Injection Vulnerability
Calendar MX BASIC "ID" Parameter Handling Remote SQL Query Injection Vulnerability
Efkan Forum Multiple Parameter Handling Remote SQL Query Injection Vulnerabilities
Xt-News Multiple Parameter Handling SQL Injection and Cross Site Scripting Vulnerabilities
iXprim CMS "story_id" Parameter Handling Remote SQL Query Injection Vulnerability
Burak Yylmaz Download Portal Multiple Parameter Remote SQL Injection Vulnerabilities
VerliAdmin Multiple Parameter Handling File Inclusion and SQL Injection Vulnerabilities
Contra Haber Sistemi "id" Parameter Handling Remote SQL Query Injection Vulnerability
ScriptMate User Manager Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Bluetrait Trackback Function Unspecified Parameter Remote SQL Injection Vulnerability
Help Tip for Drupal Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
Annoncescripthp Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
Messageriescripthp Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
EzHRS HR Assist "Uname" Parameter Handling Remote SQL Query Injection Vulnerability
Lotfian Request For Travel "PID" Parameter Handling Remote SQL Injection Vulnerability
AppIntellect SpotLight CRM "login" and "password" Remote SQL Injection Vulnerabilities
Fantastic News "displayOneNews()" Function Remote SQL Query Injection Vulnerability
DUware DUdirectory "password" Parameter Remote SQL Query Injection Vulnerability
Publicera Php5 Framework Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Novell ZENworks Patch Management "agentid" and "pass" SQL Injection Vulnerability
Vt-Forum Lite Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
Online-Bookmarks Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
DUware DUpaypal "iPro" and "iType" Parameters Remote SQL Injection Vulnerabilities
DUware DUdownload "iFile" Parameter Handling Remote SQL Injection Vulnerability
DUware DUnews Multiple Parameter Handling Remote SQL Injection Vulnerabilities
deV!Lz Clanportal Multiple Remote SQL Injection and Arbitrary File Upload Vulnerabilities
Invision Blog "eid" Parameter Handling Remote SQL Query Injection Vulnerability
Seditio Multiple Parameter Handling Remote SQL Query Injection Vulnerabilities
fipsASP fipsShop "did" Parameter Handling Remote SQL Query Injection Vulnerability
Photo Organizer Multiple Parameter SQL Injection and Security Bypass Vulnerabilities
ClickGallery Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
SimpleBlog "id" Variable SQL Injection and Authentication Bypass Vulnerabilities
ClickContact "AlphaSort" and "orderby" Parameters SQL Injection Vulnerabilities
WarHound General Shopping Cart "ItemID" Parameter SQL Injection Vulnerability
PHP-Nuke News Module "sid" Parameter Handling SQL Injection Vulnerability
Anna IRC Bot Unspecified Parameters Handling Remote SQL Injection Vulnerabilities
Ultimate Survey Pro "cat" and "did" Parameters Remote SQL Injection Vulnerabilities
Liberum Help Desk "id" and "uid" Parameters Multiple SQL Injection Vulnerabilities
Basic Forum "id" Parameter Handling Remote SQL Query Injection Vulnerability
Woltlab Burning Board Lite "threadvisit" Parameter Remote SQL Injection Vulnerability
HIOX Star Rating System Script Remote File Inclusion and SQL Injection Vulnerabilities
JiRo FAQ Manager "tID" Variable Handling Remote SQL Query Injection Vulnerability
Wallpaper Website Multiple Parameter Remote SQL Query Injection Vulnerabilities
Recipes Website Multiple Parameter Handling Remote SQL Injection Vulnerabilities
fipsGallery "which" Parameter Handling Remote SQL Query Injection Vulnerability
fipsForum "kat" Parameter Handling Remote SQL Query Injection Vulnerability
fipsCMS "fid" Parameter Handling Remote SQL Query Injection Vulnerability
T.G.S. Content Management "myauthorid" Variable Remote SQL Injection Vulnerability
ContentNow "pageid" Parameter Handling Remote SQL Injection Vulnerability
Neocrome Seditio "id" Parameter Handling Remote SQL Query Injection Vulnerability
SoftAcid Link Exchange Lite "url" and "psearch" Remote SQL Injection Vulnerabilities
Enthrallweb eClassifieds Multiple Parameter Handling SQL Injection Vulnerabilities
Powies PSCRIPT pMM "edit" Parameter Remote SQL Injection Vulnerability
PSCRIPT Forum "id" Parameter Handling Remote SQL Query Injection Vulnerability
20/20 Auto Gallery Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Active News Manager "query" Parameter Handling SQL Injection Vulnerability
ASPCart Multiple Parameter Handling Remote SQL Query Injection Vulnerabilities
Enthrallweb eShopping Cart Multiple Parameter SQL Query Injection Vulnerabilities
CandyPress Store "policy" and "brand" Parameters SQL Injection Vulnerabilities
OpenHuman Unspecified Parameter Handling Remote SQL Injection Vulnerability
E-commerce Kit-1 PayPal Edition Multiple Parameter SQL Injection Vulnerabilities
Etomite "id" and "f" Remote SQL Injection and Local File Inclusion Vulnerabilities
Hpecs Shopping Cart Multiple Parameter Remote SQL Injection Vulnerabilities
E-Calendar Pro Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Dragon Internet Events Listing Multiple Parameter SQL Injection Vulnerabilities
Car Site Manager Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Evolve Shopping Cart "zoneid" Parameter Remote SQL Injection Vulnerability
WWWeb Concepts CactuShop Multiple Parameter SQL Injection Vulnerabilities
SiteXpress E-Commerce System "id" Parameter Remote SQL Injection Vulnerability
20/20 DataShed Multiple Parameter Handling Remote SQL Injection Vulnerability
NetVIOS "NewsID" Parameter Handling Remote SQL Query Injection Vulnerability
FunkyASP Glossary "alpha" Parameter Handling Remote SQL Injection Vulnerability
ASP Smiley "Username" Parameter Handling Remote SQL Injection Vulnerability
BPG Easy Publisher and Smart Publisher "vjob" Remote SQL Injection Vulnerability
ShopSystem "sessid" Parameter Handling Remote SQL Injection Vulnerability
Estate Agent Manager "Username" Parameter Remote SQL Injection Vulnerability
Ecommercemax INFINICART SQL Injection and Cross Site Scripting Vulnerabilities
ASP Scripter Easy Portal and Live Support Remote SQL Injection Vulnerability
Simple PHP Forum "username" Parameter Remote SQL Injection vulnerabilities
Vallheru "id" and "to" Parameters Handling Remote SQL Injection Vulnerabilities
bitweaver Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
NuSchool "NewsID" Parameter Handling Remote SQL Injection Vulnerability
NuStore "SubCatagoryID" Parameter Handling Remote SQL Injection Vulnerability
xenis.creator Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
NuRealestate "PropID" Parameter Handling Remote SQL Injection Vulnerability
myStats Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
BrewBlogger "id" Parameter Handling Remote SQL Query Injection Vulnerability
NuCommunity "cl_cat_ID" Parameter Handling Remote SQL Injection Vulnerability
PHPWind "AdminUser" Parameter Handling Remote SQL Injection Vulnerability
ASPPortal "Poll_ID" Parameter Handling Remote SQL Injection Vulnerability
LandShop Multiple Parameter SQL Injection Cross Site Scripting Vulnerabilities
OmniStar Article Multiple Parameter Handling Remote SQL Injection Vulnerabilities
abarcar Realty Portal Multiple Parameter Handling SQL Injection Vulnerabilities
PHP Classifieds "user_id" Parameter Handling Remote SQL Injection Vulnerability
iPrimal Forums Remote File Inclusion and SQL Injection Multiple Vulnerabilities
All In One Control Panel Multiple SQL Injection and Cross Site Scripting Issues
Article Script "category" Parameter Handling Remote SQL Injection Vulnerability
Webdrivers Simple Forum "id" Parameter Remote SQL Injection Vulnerability
FreeWebshop Remote Script SQL Injection and Local File Inclusion Vulnerabilities
DataparkSearch Engine Hostname Handling Remote SQL Injection Vulnerability
Techno Dreams Guestbook "key" Parameter Remote SQL Injection Vulnerability
Techno Dreams Announcement "key" Variable Remote SQL Injection Vulnerability
PHPEasyData Pro "cat" Parameter Handling Remote SQL Injection Vulnerability
PHPMyRing "limite" and "mots" Parameters Remote SQL Injection Vulnerabilities
PunBB Multiple Remote SQL Injection and Local File Inclusion Vulnerabilities
BytesFall Explorer "username" Parameter Handling SQL Injection Vulnerabilities
Pentaho BI Suite Unspecified Parameter Handling SQL Injection Vulnerabilities
Coppermine Photo Gallery "aid" Parameter Remote SQL Injection Vulnerability
PhpLeague "champ" Parameter Handling Remote SQL Injection Vulnerability
Extended Tracker for Drupal Unspecified Parameter SQL Injection Vulnerability
Discuz! GBK "cdb_auth" Parameter Handling Remote SQL Injection Vulnerability
LedgerSMB Unspecified Parameter Handling Remote SQL Injection Vulnerabilities
PacPoll Multiple Variable Remote SQL Injection and Security Bypass Vulnerabilities
GeoNetwork Opensource Unspecified Parameters SQL Injection Vulnerability
Highwall Enterprise and Endpoint SQL Injection and Cross Site Scripting Issues
Casinosoft Casino Script "cfam" Parameter Handling SQL Injection Vulnerability
Kinesis Interactive Cinema System SQL Injection Vulnerabilities Vulnerabilities
XchangeBoard "userNick" and "password" Remote SQL Injection Vulnerability
BSQ Sitestats for Joomla SQL Injection and Cross Site Scripting Vulnerabilities
WoltLab Burning Book Remote SQL Injection and Code Execution Vulnerabilities
Etomite Unspecified Parameter Handing Remote SQL Injection Vulnerabilities
4images "search_user" Parameter Handling Remote SQL Injection Vulnerability
Blue Smiley Organizer Unspecified SQL Injection and File Upload Vulnerabilities
AAIportal Unspecified Parameter Handling Remote SQL Injection Vulnerabilities
Emek Portal "kulad" and "sifre" Parameters Remote SQL Injection Vulnerabilities
Cahier de Texte "classe_ID" and "matiere_ID" Remote SQL Injection Vulnerabilities
PHP Classifieds "catid_search" and "catid" Remote SQL Injection Vulnerabilities
Mambo "passwd" Variable SQL Injection and Authentication Bypass Vulnerability
ConPresso CMS Multiple SQL Injection and Cross Site Scripting Vulnerabilities
OpenBiblio Multiple Local File Inclusion and Remote SQL Injection Vulnerabilities
e-Vision CMS Remote SQL Injection and Arbitrary PHP File Upload Vulnerabilities
Php Blue Dragon CMS Multiple Remote File Inclusion and SQL Injection Issues
more.groupware "new_calendarid" Parameter Remote SQL Injection Vulnerability
Tekman Portal "uye_id" Parameter Handling Remote SQL Injection Vulnerability
PHP-Post Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
Charon Cart "ProductID" Parameter Handling Remote SQL Injection Vulnerability
Techno Dreams FAQ Manager Package "key" Remote SQL Injection Vulnerability
EShoppingPro "order" Parameter Handling Remote SQL Injection Vulnerability
ClickBlog "username" and "form_codeword" Remote SQL Injection Vulnerabilities
Moodle Multiple Modules Cross Site Scripting and SQL Injection Vulnerabilities
phpMyDirectory "letter" Remote SQL Injection and Cross Site Scripting Vulnerabilities
CMS.R "adminname" and "adminpass" Parameters SQL Injection Vulnerabilities
Vivvo Article Management CMS SQL Injection and PHP File Inclusion Vulnerabilities
Timesheet PHP "username" Variable Handling Remote SQL Injection Vulnerability
PHP-Fusion "maincore.php" Super Globals Extraction SQL Injection Vulnerability
PhpLeague "id_joueur" Parameter Handling Remote SQL Injection Vulnerability
Tr Forum "id2" Variable SQL Injection and Administrative Account Creation Vulnerabilities
SimpleBlog "id" Parameter Handling Remote SQL Injection Vulnerability
ssLinks "id" Parameter Handling Remote SQL Injection Vulnerability
Autentificator "user" Parameter Handling Remote SQL Injection Vulnerability
ICBlogger "yid" Parameter Handling Remote SQL Injection Vulnerability
Annuaire 1Two "id" Parameter Handling Remote SQL Injection Vulnerability
Simple Machines Forum "cur_cat" Parameter Handling Remote SQL Injection Vulnerability
Membrepass Multiple Parameter Remote Code Execution and SQL Injection Vulnerabilities
ezContents Multiple Parameter Handling File Inclusion and SQL Injection Vulnerabilities
JS ASP Faq Manager "uid" and "pwd" Parameters Handling SQL Injection Vulnerabilities
Xoops "user_avatar" Parameter Handling Remote SQL Injection Vulnerability
Cybozu Garoon Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Mambo "id" Parameter and Administrative Section Multiple SQL Injection Vulnerabilities
Easylinks for Drupal Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
Cool Messenger Server and Cool Manager "username" Remote SQL Injection Vulnerability
XennoBB "icon_topic" Parameter Handling Remote SQL Injection Vulnerability
CubeCart Multiple Parameter Handling SQL Injection and Cross Site Scripting Vulnerabilities
Owl Intranet Engine Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
Zen Cart Multiple Parameter Handling Remote File Inclusion and SQL Injection Vulnerabilities
PHPMyRing "idsite" Parameter Handling Remote SQL Injection Vulnerability
CLUB-Nuke [XP] "haber_id" and "menu_id" Parameters Remote SQL Injection Vulnerabilities
Bibliography Module for Drupal Remote SQL Injection and Cross Site Scripting Vulnerabilities
XennoBB "profile.php" Multiple Parameters Handling Remote SQL Injection Vulnerabilities
YenerTurk Haber Script "id" Parameter Handling Remote SQL Injection Vulnerability
Drupal Jobsearch Module Unspecified Parameter Handling Remote SQL Injection Vulnerability
myBloggie "trackback.php" Multiple Parameter Handling Remote SQL Injection Vulnerabilities
The Address Book Reloaded "username" and "password" Remote SQL Injection Vulnerabilities
The Address Book "username" and "password" Parameters Remote SQL Injection Vulnerabilities
Netious CMS Remote SQL Injection and Administrative Session Hijacking Vulnerabilities
GästeChaos Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
GeheimChaos Multiple Parameter Handling Remote SQL Injection Vulnerabilities
CounterChaos "Referer" HTTP Header Handling Remote SQL Injection Vulnerability
GeoAuctions Enterprise "d" Parameter Handling Remote SQL Injection Vulnerability
GeoAuctions Premier and Basic "b" Variable Handling Remote SQL Injection Vulnerability
XMB "u2u_send()" and "u2u_send_recp()" Functions Remote SQL Injection Vulnerability
ATutor "desc" and "asc" Parameters Handling Remote SQL Injection Vulnerabilities
xpoll "poll" Parameter Handling Remote SQL Injection Vulnerability
X-Protection "username" and "password" Parameters Remote SQL Injection Vulnerabilities
X-Statistics "User-Agent" HTTP Header Handling Remote SQL Injection Vulnerability
SD Studio CMS Multiple Parameter Handling Remote SQL Injection Vulnerabilities
LinksCaffe Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
Etomite "username" Parameter Handling Remote SQL Injection Vulnerability
X7 Chat "old_prefix" Parameter Handling Remote SQL Injection Vulnerability
Loudblog "id" Parameter Handling Remote SQL Injection Vulnerability
phpFaber TopSites "i_cat" Parameter SQL Injection and Cross Site Scripting Vulnerabilities
DeluxeBB Multiple Variable Handling SQL Injection and Cross Site Scripting Vulnerabilities
Professional Home Page Tools Guestbook Multiple Remote SQL Injection Vulnerabilities
Eskolar CMS Multiple Parameter Handling Remote SQL Injection Vulnerabilities
boastMachine Multiple Parameter Handling SQL Injection and Cross Site Scripting Vulnerabilities
Francisco Charrua Photo-Gallery "id" Variable Handling Remote SQL Injection Vulnerability
MyBulletinBoard (MyBB) "CLIENT_IP" Variable Handling Remote SQL Injection Vulnerability
Invision Power Board "CLIENT_IP" Variable Handling Remote SQL Injection Vulnerability
OrbitMATRIX "page_name" Variable SQL Injection and Cross Site Scripting Vulnerability
CMS Mundo Modules Multiple Parameter Handling Remote SQL Injection Vulnerabilities
HiveMail Multiple Parameter Handling SQL Injection and Cross Site Scripting Vulnerabilities
Blue Dojo Studios Graffiti Forums "f" Parameter Remote SQL Injection Vulnerability
Webvizyon Portal 2006 "ID" Parameter Handling Remote SQL Injection Vulnerability
MyioSoft AjaxPortal "username" and "password" Remote SQL Injection Vulnerability
Papoo Multiple Variable Handling SQL Injection and Cross Site Scripting Vulnerabilities
Buddy Zone Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
Vincent Leclercq News Multiple SQL Injection and Cross Site Scripting Vulnerabilities
BXCP "where" Parameter Handling Remote SQL Injection Vulnerability
MyNewsGroups "grp_id" Parameter Handling Remote SQL Injection Vulnerability
deV!Lz Clanportal DZCP "id" Variable Handling Remote SQL Injection Vulnerabilities
FineShop Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
Some Chess Unspecified Parameter Handling Remote SQL Injection Vulnerabilities
Joomla! Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
MyBB Multiple Variable Handling SQL Injection and Cross Site Scripting Vulnerabilities
PatchLink Update Remote SQL Injection and Information Manipulation Vulnerabilities
phpRaid Multiple Parameter Remote SQL Injection and File Inclusion Vulnerabilities
phpRaid Multiple Parameter Remote SQL Injection and File Inclusion Vulnerabilities
MyAds Module for Xoops "lid" Parameter Handling Remote SQL Injection Vulnerability
BLOG:CMS "id" Parameter Handling Remote SQL Injection Vulnerability
Scout Portal Toolkit (SPT) "forumid" Parameter Remote SQL Injection Vulnerability
Jaws Multiple Parameter Handling SQL Injection and Cross Site Scripting Vulnerabilities
Open Guestbook Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
DeluxeBB Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
Anthill "order" and "bug" Parameters Handling Remote SQL Injection Vulnerabilities
THoRCMS Multiple Parameter Remote File Inclusion and SQL Injection Vulnerabilities
Infinite Core Technologies (ICT) "post" Parameter Remote SQL Injection Vulnerability
Softbiz Dating Script Multiple Variable Handling Remote SQL Injection Vulnerabilities
MyBB "showcodebuttons" Parameter Handling Remote SQL Injection Vulnerability
YaBB SE "user" Parameter Handling Remote SQL Injection Vulnerability
Project EROS bbsengine Remote SQL Injection and Cross Site Scripting Vulnerabilities
DataLife Engine "user" Parameter Handling Remote SQL Injection Vulnerability
Ultimate Estate Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
V3 Chat Multiple Variable Remote SQL Injection and Cross Site Scripting Vulnerabilities
IMGallery "start" and "sort" Variables Handling Remote SQL Injection Vulnerabilities
thinkWMS "id" and "catid" Parameters Handling Remote SQL Injection Vulnerabilities
phpTRADER Multiple Parameter Handling Remote SQL Injection Vulnerabilities
VBZooM "QuranID" Parameter Handling Remote SQL Injection Vulnerability
Clubpage Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
VUBB Multiple Variable Remote SQL Injection and Cross Site Scripting Vulnerabilities
Open-Realty "sorttype" Parameter Handling Remote SQL Injection Vulnerability
WeBBoA Hosting Script "id" Parameter Handling Remote SQL Injection Vulnerability
BtitTracker "by" and "order" Variables Handling Remote SQL Injection Vulnerabilities
CavoxCms "page" Parameter Handling Remote SQL Injection Vulnerability
Free Realty "sort" Parameter Handling Remote SQL Injection Vulnerability
Sharky e-shop Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
Xarancms "xarancms_haupt.php" Script Remote SQL Injection Vulnerability
TPL Design tplShop "first_row" Parameter Remote SQL Injection Vulnerability
Mambo Weblinks "title" Parameter Handling Remote SQL Injection Vulnerability
ASP Stats Generator Remote SQL Injection and Code Execution Vulnerabilities
HotPlug CMS Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
phpBannerExchange "login" and "pass" Parameters SQL Injection Vulnerabilities
APBoard Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Virtual War "war.php" Multiple Variable Handling Remote SQL Injection Vulnerabilities
Calendarix Basic "id" Parameter Handling Remote SQL Injection Vulnerabilities
Chipmailer "anfang" Parameter Handling Remote SQL Injection Vulnerability
phpBannerExchange "email" Parameter Handling SQL Injection Vulnerability
TikiWiki Unspecified Variable Cross Site Scripting and SQL Injection Vulnerabilities
CMS Mundo Multiple Variable Handling SQL Injection and File Upload Vulnerabilities
DeluxeBB Multiple Variable Handling File Inclusion and SQL Injection Vulnerabilities
Blursoft blur6ex "ID" Parameter Handling Remote SQL Injection Vulnerability
Coppermine Photo Gallery "add_hit()" Function Remote SQL Injection Vulnerability
Enthrallwebe ePhotos Multiple Parameter Remote SQL Injection Vulnerabilities
CS-Forum Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
Mobile Space Community Multiple SQL Injection and Cross Site Scripting Issues
Mafia Moblog Remote SQL Injection and Full Path Disclosure Vulnerabilities
OfficeFlow Multiple Variable Handling SQL Injection and Cross Site Scripting Issues
My Photo Scrapbook Multiple Variable SQL Injection and Cross Site Scripting Issues
SelectaPix Multiple Parameter SQL Injection and Cross Site Scripting Vulnerabilities
Calendar Express "catid" and "cid" Parameters Remote SQL Injection Vulnerability
Maidensoul xueBook "start" Variable Handling Remote SQL Injection Vulnerability
Pike Unspecified Parameter Handling Remote PostgreSQL SQL Injection Vulnerability
abarcar Realty Portal "cat" Parameter Handling Remote SQL Injection Vulnerability
iBWd Guestbook "offset" Parameter Handling Remote SQL Injection Vulnerability
tekno.Portal "id" Parameter Handling Remote SQL Injection Vulnerability
Kmita FAQ Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
Alex News-Engine "newsid" Variable Handling Remote SQL Injection Vulnerability
myNewsletter "UserName" Variable Handling Remote SQL Injection Vulnerability
LocazoList Classifieds "msgid" Parameter Remote SQL Injection Vulnerability
Particle Wiki "version" Parameter Handling Remote SQL Injection Vulnerability
Particle Gallery "imageid" Parameter Handling Remote SQL Injection Vulnerability
LifeType "articleId" Parameter Handling Remote SQL Injection Vulnerability
TAL RateMyPic Multiple SQL Injection and Cross Site Scripting Vulnerabilities
CodeAvalanche FreeForum SQL Injection and Cross Site Scripting Vulnerabilities
Unak-CMS Multiple SQL Injection and Cross Site Scripting Vulnerabilities
aspWebLinks "linkID" Parameter Handling Remote SQL Injection Vulnerability
Lore "article_id" Parameter Handling Remote SQL Injection Vulnerability
Hitachi HITSENSER3 SQL Injection and Authentication Bypass Vulnerability
4nForum "tid" Parameter Handling Remote SQL Injection Vulnerability
Achievo "atkselector" Parameter Handling Remote SQL Injection Vulnerability
Geeklog Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
tinyBB Multiple Variable Handling File Inclusion and SQL Injection Vulnerabilities
Enigma Haber Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Mini-NUKE "Your_Account.asp" Multiple Remote SQL Injection Vulnerabilities
Eggblog "id" Parameter Handling Remote SQL Injection Vulnerability
qjForum "uName" Parameter Handling Remote SQL Injection Vulnerability
Pre Shopping Mall Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Pre News Manager Multiple SQL Injection and Cross Site Scripting Vulnerabilities
ChatPat Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
Realty Pro One Multiple SQL Injection and Cross Site Scripting Vulnerabilities
CosmicShoppingCart Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Drupal Remote SQL Injection and Arbitrary Script Execution Vulnerabilities
Publicist Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
HyperStop Web Host Directory "uri" Parameter Remote SQL Injection Vulnerability
AlstraSoft Web Host Directory "uri" Parameter Remote SQL Injection Vulnerability
Diesel Joke Site "id" Parameter Handling Remote SQL Injection Vulnerability
e107 Unspecified Parameter Handling Remote SQL Injection Vulnerability
AlstraSoft Article Manager SQL Injection and Cross Site Scripting Vulnerabilities
DGBook Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
Destiney Links Script Multiple SQL Injection and Cross Site Scripting Vulnerabilities
4R Linklist "cat" Parameter Handling Remote SQL Injection Vulnerability
UseBB Multiple Modules SQL Injection and Cross Site Scripting Vulnerabilities
Xtreme Topsites Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Fujitsu MyWeb Products Unspecified Variable Handling SQL Injection Vulnerability
Stylish Text Ads Script "id" Variable Handling Remote SQL Injection Vulnerability
Zix Forum "layid" Parameter Handling Remote SQL Injection Vulnerability
CodeAvalanche News "password" Variable Handling SQL Injection Vulnerability
Sphider Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
Hitachi EUR Unspecified Variable Handling Remote SQL Injection Vulnerability
PHP-Fusion "srch_where" Variable Handling Remote SQL Injection Vulnerablility
Azboard Multiple Parameter Handling Remote SQL Injection Vulnerabilities
DeluxeBB "name" Parameter Handling Remote SQL Injection Vulnerability
e107 "cookie_name" Parameter Handling Remote SQL Injection Vulnerability
Chirpy! Unspecified Parameter Handling Remote SQL Injection Vulnerability
AliPAGER "ubild" Parameter SQL Injection and Cross Site Scripting Vulnerability
OzzyWork Galeri Remote ASP File Upload and SQL Injection Vulnerabilities
Adobe Macromedia Dreamweaver Server Behavior SQL Injection Vulnerability
MultiCalendars "calsids" Parameter Handling Remote SQL Injection Vulnerability
EImagePro Multiple Parameter Handling Remote SQL Injection Vulnerabilities
EDirectoryPro "keyword" Parameter Handling Remote SQL Injection Vulnerability
IA-Calendar Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
Ideal BB Multiple Remote File Upload and SQL Injection Vulnerabilities
SaphpLesson Multiple SQL Injection and Full Path Disclosure Vulnerabilities
Ocean12 Calendar Manager SQL Injection and Cross Site Scripting Vulnerabilities
VP-ASP Shopping Cart "cid" Parameter Handling SQL Injection Vulnerability
MaxxSchedule Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
PHP Arena paCheckbook Multiple Parameter SQL Injection Vulnerabilities
Flexcustomer Multiple Parameter Handling Remote SQL Injection Vulnerabilities
evoTopsites "cat_id" and "id" Parameters Remote SQL Injection Vulnerabilities
Creative Community Portal Multiple Parameter SQL Injection Vulnerabilities
Newsadmin "nid" Parameter Handling Remote SQL Injection Vulnerability
Invision Gallery "album" Parameter Handling Remote SQL Injection Vulnerability
CyberBuild Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
Invision Power Board "selectedpids" Variable Remote SQL Injection Vulnerability
4images "sessionid" Parameter Handling Remote SQL Injection Vulnerability
Advanced Poll "User-Agent" HTTP Header Remote SQL Injection Vulnerability
MaxTrade "categori" Parameter Handling Remote SQL Injection Vulnerability
Ruperts News Script "username" Parameter Remote SQL Injection Vulnerability
AZNEWS "ID" Parameter Handling Remote SQL Injection Vulnerability
PHP Pro Publish Multiple Parameter Handling Remote SQL Injection Vulnerabilities
PHP Newsfeed Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Network Administration Visualized Unspecified Remote SQL Injection Vulnerability
MyBulletinBoard Multiple Parameter Handling Remote SQL Injection Vulnerabilities
IP3 Networks NA75 Multiple SQL Injection and Security Bypass Vulnerabilities
Invision Power Board Multiple Code Execution and SQL Injection Vulnerabilities
Instant Photo Gallery "id" Variable Handling Remote SQL Injection Vulnerability
photokorn Multiple Parameter Handling Remote SQL Injection Vulnerabilities
QuickEStore Multiple Remote SQL Injection and Full Path Disclosure Vulnerabilities
Cartweaver ColdFusion Remote SQL Injection and Full Path Disclosure Vulnerabilities
AmpleShop Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Simplog Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
Help Center Live osTicket Multiple Variable Handling SQL Injection Vulnerabilities
RI Blog "username" and "password" Variables Remote SQL Injection Vulnerability
SL_site Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
PHPSurveyor "surveyid" Remote SQL Injection and Code Execution Vulnerability
Bloggage "acc_name" and "password" Parameters SQL Injection Vulnerabilities
WWWthreads "messages" and "referral_id" Variables SQL Injection Vulnerabilities
PCPIN Chat Remote SQL Injection and Local File Inclusion Vulnerabilities
AspSitem "id" Parameter Handling Remote SQL Injection Vulnerability
RechnungsZentrale "authent.php4" File Inclusion and SQL Injection Vulnerabilities
LinPHA Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
Plexum "pagesize" and "startpos" Variables Handling SQL Injection Vulnerability
PMTool "order" Parameter Handling Remote SQL Injection Vulnerabilities
ModernBill Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Article Publisher Pro Multiple Parameter Handling SQL Injection Vulnerabilities
xFlow Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
Neuron Blog Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
Black Orpheus ClanMemberSkript "userID" Remote SQL Injection Vulnerability
myEvent Multiple Variable Handling File Inclusion and SQL Injection Vulnerabilities
MyBB Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
Fuju News Remote SQL Injection and Authentication Bypass Vulnerabilities
Musicbox Multiple SQL Injection and Cross Site Scripting Vulnerabilities
PowerClan "memberid" Parameter Handling Remote SQL Injection Vulnerability
Warforge.NEWS Multiple SQL Injection and Cross Site Scripting Vulnerabilities
RateIt "rateit_id" Parameter Handling Remote SQL Injection Vulnerability
PHP121 Instant Messenger Cookie Handling Remote SQL Injection Vulnerability
Chipmunk Guestbook "username" Parameter Remote SQL Injection Vulnerability
MvBlog Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
Confixx Pro Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
VegaDNS "cid" Parameter Handling Remote SQL Injection Vulnerability
dnGuestbook "email" and "id" Parameters Remote SQL Injection Vulnerability
JBook Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
MAXdev MD-Pro Remote SQL Injection and Full Path Disclosure Vulnerabilities
XBrite Members "id" Parameter Handling Remote SQL Injection Vulnerability
Shopweezle Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Apt-webshop-system Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Clansys Multiple Remote Command Execution and SQL Injection Vulnerability
MWNewsletter Multiple SQL Injection and Cross Site Scripting Vulnerabilities
MD News "admin.php" Remote SQL Injection and Security Bypass Vulnerabilities
CzarNews Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
wpBlog "postid" Parameter Handling Remote SQL Injection Vulnerability
Crafty Syntax Image Gallery File Upload and SQL Injection Vulnerabilities
Interact Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
Softbiz Image Gallery Script SQL Injection and Cross Site Scripting Vulnerabilities
SiteMan "txtpassword" Parameter Handling Remote SQL Injection Vulnerability
aWebNews Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
aWebBB Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
MonAlbum Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Oxygen "fid" Parameter Handling Remote SQL Injection Vulnerability
qliteNews "username" Parameter Handling Remote SQL Injection Vulnerability
RedCMS Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
X-Changer Multiple Parameter Handling Remote SQL Injection Vulnerabilities
EzASPSite "scheme" Parameter Handling Remote SQL Injection Vulnerability
VNews Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
VBook Multiple Variable SQL Injection and Cross Site Scripting Vulnerabilities
NetOffice "loginForm" Parameter Handling Remote SQL Injection Vulnerability
PHPCollab "loginForm" Parameter Handling Remote SQL Injection Vulnerability
Tilde CMS "id" Parameter Handling Remote SQL Injection Vulnerability
OneOrZero "id" Parameter Handling Remote SQL Injection Vulnerability
vCounter "url" Variable Handling Remote SQL Injection Vulnerability
Sourceworkshop Newsletter "newsletteremail" Remote SQL Injection Vulnerability
Null News "email" and "username" Parameters SQL Injection Vulnerabilities
phpNewsManager Multiple Parameter Remote SQL Injection Vulnerabilities
Cholod MySQL Based Message Board SQL Injection and Cross Site Scripting
PHP Script Index "search" SQL Injection and Cross Site Scripting Vulnerability
Nuked-Klan "m" Parameter Handling Remote SQL Injection Vulnerability
Pixel Motion Blog Multiple Parameter Remote SQL Injection Vulnerabilities
AkoComment Module for Mambo Multiple Variable SQL Injection Vulnerabilities
PHP Ticket "frm_search_in" Variable Handling Remote SQL Injection Vulnerability
AdMan Multiple Scripts Remote SQL Injection and Full Path Disclosure Vulnerabilities
phpWebsite "sid" Parameter Handling Remote SQL Injection Vulnerability
1WebCalendar Multiple Parameter Handling Remote SQL Injection Vulnerabilities
ASPPortal "downloadid" Parameter Handling Remote SQL Injection Vulnerability
gCards Multiple Remote SQL Injection and Cross Site Scripting Vulnerabilities
BetaParticle Blog "fldGalleryID" and "id" Parameters SQL Injection Vulnerabilities
SoftBB "mail" Parameter Handling Remote SQL Injection Vulnerability
Skull-Splitter Download Counter for Wallpapers SQL Injection Vulnerabilities
Maian Support "email" and "pass" Parameters Remote SQL Injection Vulnerability
Maian Events Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Maian Weblog Multiple Parameter Handling Remote SQL Injection Vulnerabilities
OxyNews "oxynews_comment_id" Parameter Remote SQL Injection Vulnerability
Milkeyway Captive Portal SQL Injection and Cross Site Scripting Vulnerabilities
DSLogin Multiple Parameter Handling Remote SQL Injection Vulnerabilities
DSNewsletter "email" Parameter Handling Remote SQL Injection Vulnerability
DSPoll "pollid" Parameter Handling Remote SQL Injection Vulnerability
DSCounter "X-Forwarded-For" Header Remote SQL Injection Vulnerability
DSDownload "category" and "key" Parameters SQL Injection Vulnerabilities
@1 File Store Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Hosting Controller "search" Variable Handling Remote SQL Injection Vulnerability
RedBLoG "cat_id" Parameter Handling Remote SQL Injection Vulnerability
D2KBlog "memName" and "msg" SQL Injection and Cross Site Scripting Issues
Loudblog Multiple Local File Inclusion and Remote SQL Injection Vulnerabilities
Cilem Haber "haber_id" Variable Handling Remote SQL Injection Vulnerability
Manas Tungare Site Membership Cross Site Scripting and SQL Injection Issues
NMDeluxe "nick" and "id" SQL Injection and Cross Site Scripting Vulnerabilities
Invision Power Board SQL Injection and Cross Site Scripting Vulnerabilities
bMail GBK Charsets Handling Unspecified Remote SQL Injection Vulnerability
D2-Shoutbox Module for IPB "load" Variable Remote SQL Injection Vulnerability
Total Ecommerce "id" Parameter Handling SQL Injection Vulnerability
Akarru Social BookMarking Engine Remote SQL Injection Vulnerability
Joomla! Remote SQL Injection and Information Disclosure Vulnerabilities
Gregarius Multiple SQL Injection and Cross Site Scripting Vulnerabilities
CyBoards PHP Lite "parent" Variable Remote SQL Injection Vulnerability
Php-Stats Multiple Command Execution and SQL Injection Vulnerabilities
Pixelpost Multiple SQL Injection and Cross Site Scripting Vulnerabilities
PluggedOut Nexus "email" Parameter Remote SQL Injection Vulnerability
VUBB "pass" Parameter Handling Remote SQL Injection Vulnerability
NZ Ecommerce Multiple SQL Injection and Cross Scripting Vulnerabilities
MyBB "comma" and "forums" Parameters Remote SQL Injection Vulnerabilities
Sendcard Unspecified Parameter Handling SQL Injection Vulnerability
N8cms Multiple Variable SQL Injection and Cross Scripting Vulnerabilities
StoreBot "Pwd" Parameter Handling Remote SQL Injection Vulnerability
Vegas Forum "postid" Variable Handling Remote SQL Injection Vulnerability
d3jeeb Pro "catid" Variable Handling Remote SQL Injection Vulnerabilities
EKINboard Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Debian Security Update Fixes Tutos Multiple SQL Injection Vulnerabilities
LanSuite LanParty Intranet System "fid" Remote SQL Injection Vulnerability
PwsPHP "id" Parameter Handling Remote SQL Injection Vulnerability
Pentacle In-Out Board Multiple Parameter SQL Injection Vulnerabilities
Oi! Email Marketing System "myname" and "pass" SQL Injection Issues
VPMi Enterprise "UpdateID0" Variable Remote SQL Injection Vulnerability
Web Calendar Pro "tabls" Parameter Remote SQL Injection Vulnerability
Noah Classifieds Remote File Inclusion and SQL Injection Vulnerabilities
PHP-Nuke Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Bugzilla Multiple SQL Injection and Cross Site Scripting Vulnerabilities
ilchClan "pid" Parameter Handling Remote SQL Injection Vulnerability
PostNuke Multiple SQL Injection and Cross Site Scripting Vulnerabilities
ilchClan "login_name" Parameter Handling SQL Injection Vulnerability
BXCP "tid" Parameter Handling Remote SQL Injection Vulnerability
Geeklog Multiple Remote SQL Injection and File Inclusion Vulnerabilities
WPCeasy "uid" and "pwd" Parameters Remote SQL Injection Vulnerability
PHP-Nuke "Your_Account" Module Remote SQL Injection Vulnerability
Teca Diary Personal Edition "functions.php" SQL Injection Vulnerability
MyBB Multiple Variable SQL Injection and Cross Site Scripting Issues
BirthSys "month" and "date" Variables Remote SQL Injection Vulnerability
PHP Classifieds "member_login.php" Remote SQL Injection Vulnerability
webSPELL "title_op" Parameter Handling SQL Injection Vulnerability
Invision Power Board Army System Mod SQL Injection Vulnerability
RunCMS "to_userid" Parameter Handling Remote SQL Injection Vulnerability
Hitachi Business Logic SQL Injection and Cross Site Scripting Vulnerabilities
SmE GB Host Username Handling Remote SQL Injection Vulnerability
Zen Cart Unspecified Parameter Handling SQL Injection Vulnerabilities
PHP/MYSQL Timesheet Multiple Variable SQL Injection Vulnerabilities
CALimba "rb_auth.php" Remote SQL Injection and Security Bypass Issue
Time Tracking Software SQL Injection and Cross Site Scripting Issues
Magic Calendar Lite "index_login" and "password" SQL Injection Issue
HiveMail Multiple Command Execution and SQL Injection Vulnerabilities
DB_eSession Class "deleteSession" Remote SQL injection Vulnerability
XMB Multiple Variable SQL Injection and Cross Site Scripting Issues
2200net Calendar System Multiple Parameter SQL Injection Vulnerabilities
Whomp Real Estate Manager XP 2005 Login SQL Injection Vulnerability
GuestBookHost "email" and "password" SQL Injection Vulnerabilities
MyBB "posts" Parameter Handling Remote SQL Injection Vulnerability
Unknown Domain Shoutbox SQL Injection and Cross Site Scripting Issues
phphg Guestbook SQL Injection and Cross Site Scripting Vulnerabilities
Hosting Controller "IP" and "GatewayID" Variables SQL Injection Issues
Clever Copy "ID" Parameter Handling Remote SQL Injection Vulnerability
PluggedOut Blog Multiple SQL Injection and Cross Site Scripting Issues
PHPStatus "Username" Parameter Remote SQL Injection Vulnerability
Daffodil CRM "userLoginBox" and "passwordBox" SQL Injection Issue
Dragoran Portal Module for IPB "site" Variable SQL Injection Vulnerability
SPIP Multiple SQL Injection and Cross Site Scripting Vulnerabilities
MyBB "templatelist" Variable Handling Remote SQL Injection Vulnerability
Symantec Sygate Management Server Remote SQL Injection Vulnerability
PHP GEN Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Calendarix "login" and "catview" Parameters SQL Injection Vulnerabilities
SZUserMgnt "username" Parameter Remote SQL Injection Vulnerability
ASPThai Forums Authentication Remote SQL Injection Vulnerability
NewsPHP Multiple Variable Handling Remote SQL Injection Vulnerabilities
Phpclanwebsite "par" and "poll_id" Remote SQL Injection Vulnerabilities
AndoNET Blog "entrada" Parameter Remote SQL Injection Vulnerability
miniBloggie "user" Variable Handling Remote SQL Injection Vulnerability
ADOdb PostgreSQL Unspecified Remote SQL Injection Vulnerability
e-moBLOG "monthy" and "login" Parameters SQL Injection Vulnerabilities
Zoph Unspecified Parameter Handling Remote SQL Injection Vulnerabilities
Hitachi HITSENSER Data Mart Server Remote SQL Injection Vulnerability
WebspotBlogging SQL Injection and Command Execution Vulnerability
PHlyMail Multiple SQL Injection and Cross Site Scripting Vulnerabilities
microBlog "month" and "year" Parameters SQL Injection Vulnerabilities
aoblogger Multiple SQL Injection and Cross Site Scripting Vulnerabilities
WhiteAlbum "dir" Parameter Handling Remote SQL Injection Vulnerability
PDFdirectory Multiple Parameter Handling SQL Injection Vulnerabilities
Benders Multiple Variable Handling Remote SQL Injection Vulnerabilities
geoBlog "cat" Parameter Handling Remote SQL Injection Vulnerability
WP-Stats WordPress Plug-in "author" Remote SQL Injection Vulnerability
SimpleBlog Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Bit 5 Blog Multiple SQL Injection and Cross Site Scripting Vulnerabilities
BlogPHP "username" Variable Handling Remote SQL Injection Vulnerability
Wordcircle Multiple SQL Injection and Cross Site Scripting Vulnerabilities
ASPSurvey "Password" Parameter Remote SQL Injection Vulnerability
Mini-NUKE Remote SQL Injection and Security Bypass Vulnerabilities
AspTopSites Multiple Parameter Handling SQL Injection Vulnerabilities
MyPHPim Remote SQL Injection and Arbitrary File Upload Vulnerabilities
TankLogger "livestock_id" Parameter Remote SQL Injection Vulnerability
PHP-Nuke EV "query" Parameter Handling Remote SQL Injection Issue
VenomBoard Multiple Parameter Handling SQL Injection Vulnerabilities
MusicBox "show" and "type" Parameters SQL Injection Vulnerabilities
427BB Multiple SQL Injection and Cross Site Scripting Vulnerabilities
TheWebForum SQL Injection and Cross Site Scripting Vulnerabilities
Foro Domus "email" SQL Injection and Cross Site Scripting Vulnerability
ADN Forum Remote SQL Injection and Cross Site Scripting Vulnerabilities
Timecan CMS "email" SQL Injection and Cross Site Scripting Vulnerability
Oneplug CMS Multiple Parameter Remote SQL Injection Vulnerabilities
Chimera Web Portal System SQL Injection and Cross Site Scripting Issues
inTouch "login_verify" SQL Injection and Authentication Bypass Issue
ScozBook "auth.php" SQL Injection and Authentication Bypass Issue
Lizard Cart CMS "id" Parameter Remote SQL Injection Vulnerability
SiteSuite CMS "page" Parameter Handling SQL Injection Vulnerability
NKads Remote SQL Injection and Command Execution Vulnerability
VEGO Web Forum "theme_id" Parameter SQL Injection Vulnerability
VEGO Links Builder "username" Parameter SQL Injection Vulnerability
PHPenpals "personalID" Parameter Remote SQL Injection Vulnerability
PHPjournaler "readold" Parameter Remote SQL Injection Vulnerability
Web Wiz Multiple Products "txtUserName" SQL Injection Vulnerability
Primo Cart "q" and "email" Parameters SQL Injection Vulnerabilities
BugPort Multiple SQL Injection and Cross Site Scripting Vulnerabilities
MyBB Multiple SQL Injection and Cross Site Scripting Vulnerabilities
PHP-Fusion Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Mantis Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Lois Software WebDB "Search0" Parameter SQL Injection Vulnerability
Statistics Counter Service User Area Remote SQL Injection Vulnerability
phpSlash "story_id" Parameter Remote SQL Injection Vulnerability
Papoo Multiple Parameter Handling Remote SQL Injection Vulnerabilities
Chatspot Module for phpBB SQL Injection and Security Bypass Issues
paFileDB Extreme Edition "newsid" and "id" SQL Injection Vulnerabilities
iHTML Merchant "merchant.ihtml" Multiple SQL Injection Vulnerabilities
iHTML Merchant Mall "browse.ihtml" Multiple SQL Injection Vulnerabilities
Baseline CMS "Page.asp" SQL Injection and Cross Site Scripting Issues
Bitweaver Multiple SQL Injection and Cross Site Scripting Vulnerabilities
CitySoft Community Enterprise SQL Injection and Cross Site Scripting
ContentServ "StoryID" Parameter Remote SQL Injection Vulnerability
e-publish Remote SQL Injection and Cross Site Scripting Vulnerabilities
UStore Remote SQL Injection and Cross Site Scripting Vulnerabilities
Komodo CMS SQL Injection and Cross Site Scripting Vulnerabilities
ODFaq "cat" and "srcText" Parameters SQL Injection Vulnerabilities
phpMyAdmin "server_privileges.php" Remote SQL Injection Vulnerability
AlmondSoft Products "id" Parameter Remote SQL Injection Vulnerability
PlexCart X3 Multiple Parameters Remote SQL Injection Vulnerability
toendaCMS "id" SQL Injection and Cross Site Scripting Vulnerabilities
Envolution Remote SQL Injection and Cross Site Scripting Vulnerabilities
PHP Support Tickets Multiple Parameter SQL Injection Vulnerabilities
QuickPayPro SQL Injection and Cross Site Scripting Vulnerabilities
EncapsGallery "id" Parameter Remote SQL Injection Vulnerability
Jamit Job Board "cat" Parameter Remote SQL Injection Vulnerability
DreamPoll "id" Parameter Remote SQL Injection Vulnerability
PhpWebGallery Multiple Parameter Remote SQL Injection Vulnerabilities
Snipe Gallery SQL Injection and Cross Site Scripting Vulnerabilities
mcGalleryPRO SQL Injection and Directory Traversal Vulnerabilities
phpCOIN Remote PHP File Inclusion and SQL Injection Vulnerabilities
Arab Portal "global.php" Script Remote SQL Injection Vulnerability
Utopia News Pro Multiple Scripts Remote SQL Injection Vulnerabilities
phpWebThings Multiple Scripts Remote SQL Injection Vulnerabilities
e107 Multiple Parameters Handling Remote SQL Injection Vulnerabilities
myBloggie Multiple Parameters Remote SQL Injection Vulnerabilities
DCP-Portal Multiple Parameters Remote SQL Injection Vulnerabilities
Netref "cat" Parameter Handling Remote SQL Injection Vulnerability
MyBulletinBoard Unspecified Remote SQL Injection Vulnerabilities
Scout Portal Toolkit SQL Injection and Cross Site Scripting Vulnerabilities
Website Baker "username" Parameter SQL Injection Vulnerability
Lyris ListManager SQL Injection and Information Disclosure Issues
ASPMForum "baslik" and "harf" Parameters SQL Injection Vulnerabilities
Magic List Pro "ListID" Parameter Remote SQL Injection Vulnerability
Magic Forum Personal SQL Injection and Cross Site Scripting Issues
PluggedOut Blog Multiple Parameter SQL Injection Vulnerabilities
PluggedOut Nexus SQL Injection and Cross Site Scripting Vulnerabilities
Saralblog "id" Parameter Handling Remote SQL Injection Vulnerability
LocazoList Classifieds "searchdb.asp" Script SQL Injection Vulnerability
A-FAQ "faqid" and "catcode" Parameters SQL Injection Vulnerabilities
phpForumPro "parent" and "day" Remote SQL Injection Vulnerabilities
Trac Search Module Unspecified Remote SQL Injection Vulnerability
Blog System "note" and "cat" Remote SQL Injection Vulnerabilities
PHP-addressbook "id" Parameter Remote SQL Injection Vulnerability
ASPS Shopping Cart SQL Injection and Cross Site Scripting Vulnerabilities
phpYellow "haystack" and "ckey" Remote SQL Injection Vulnerabilities
Relative Real Estate Systems Remote SQL Injection Vulnerability
LandShop Real Estate Database System SQL Injection Vulnerabilities
Zen Cart Remote SQL Injection and Full Path Disclosure Vulnerabilities
Quicksilver Forums "HTTP_USER_AGENT" SQL Injection Vulnerability
PHP-Fusion "srch_text" Parameter Remote SQL Injection Vulnerability
HobSR "arrange" Parameter Remote SQL Injection Vulnerability
Web4Future Portal Solutions SQL Injection and Information Disclosure
Web4Future eDating Professional Remote SQL Injection Vulnerabilities
Widget Imprint "product_id" Parameter SQL Injection Vulnerability
Widget Property "property.php" Remote SQL Injection Vulnerabilities
Web4Future eCommerce Multiple Scripts SQL Injection Vulnerabilities
Web4Future Affiliate Manager "pid" Remote SQL Injection Vulnerability
Cars Portal "page" and "car" Parameters SQL Injection Vulnerabilities
NetClassifieds "CatID" and "ItemNum" SQL Injection Vulnerabilities
PHPX "username" Parameter Remote SQL Injection Vulnerability
DUware Multiple Products "iType" Remote SQL Injection Vulnerability
Trac "group" Parameter Handling Remote SQL Injection Vulnerability
WebCalendar SQL Injection and HTTP Response Splitting Vulnerabilities
DotClear "dc_xd" Cookie Parameter Remote SQL Injection Vulnerability
Lore "id" Parameter Handling Remote SQL Injection Vulnerability
MXChange SQL Injection and Cross Site Scripting Vulnerabilities
ASP-rider "referer" Header Handling Remote SQL Injection Vulnerability
N-13 News "id" Parameter Handling Remote SQL Injection Vulnerability
88Scripts Event Calendar "m" Parameter SQL Injection Vulnerability
O-Kiraku Nikki "day_id" Parameter Remote SQL Injection Vulnerability
Instant Photo Gallery "cat_id" and "cid" SQL Injection Vulnerabilities
Entergal MX "idcat" and "action" Parameters SQL Injection Vulnerability
DMANews Multiple Parameter Remote SQL Injection Vulnerability
ClientExec Multiple Parameter Remote SQL Injection Vulnerability
Post Affiliate Pro "sortorder" Variable Remote SQL Injection Vulnerability
BedengPSP Multiple Parameter Remote SQL Injection Vulnerability
BosDates Multiple Parameter Remote SQL Injection Vulnerability
drzes HMS Remote SQL Injection and Cross Site Scripting Vulnerabilities
WSN Knowledge Base Multiple Variable SQL Injection Vulnerabilities
SoftBiz FAQ Script "cid" and "id" Variables SQL Injection Vulnerabilities
Softbiz B2B Trading Marketplace Script SQL Injection Vulnerabilities
SocketKB Knowledge Base Remote SQL Injection Vulnerabilities
Sensation Designs KBase Express Remote SQL Injection Vulnerability
Orca Knowledgebase "qid" Variable Remote SQL Injection Vulnerability
WebCalendar Remote SQL Injection and File Overwrite Vulnerabilities
Randshop "kategorieid" and "katid" Variables SQL Injection Vulnerability
Orca Ringmaker "start" Parameter Handling SQL Injection Vulnerability
Codewalkers ltwCalendar "id" Remote SQL Injection Vulnerability
ilyav FAQ System Multiple Variable Remote SQL Injection Vulnerability
ilyav Survey System "SURVEY_ID" Remote SQL Injection Vulnerability
Orca Blog "msg" Parameter Handling Remote SQL Injection Vulnerability
Enterprise Connector "messageid" Remote SQL Injection Vulnerability
Zainu "term" and "start" Parameters Remote SQL Injection Vulnerability
eFiction Multiple SQL Injection and Command Execution Vulnerabilities
AllWeb Search "search" Parameter Remote SQL Injection Vulnerability
Netzbrett "p_entry" Parameter Remote SQL Injection Vulnerability
ShockBoard "offset" Parameter Remote SQL Injection Vulnerability
AD Center 2000 NG Pro "cat" Parameter Remote SQL Injection Issue
Simple Document Management System SQL Injection Vulnerability
SourceWell "cnt" Parameter Handling Remote SQL Injection Vulnerability
K-Search Multiple Parameters Handling SQL Injection Vulnerability
Softbiz Resource Repository Script Remote SQL Injection Vulnerabilities
UGroup "FORUM_ID" and "TOPIC_ID" Remote SQL Injection Issues
Joels Bulletin Board Multiple Scripts Remote SQL Injection Vulnerabilities
edmoBBS "edmobbs9r.php" Script Remote SQL Injection Vulnerability
Omnistar KBase Multiple Scripts Remote SQL Injection Vulnerabilities
AltantisFAQ Knowledge Base Software "searchStr" SQL Injection Issue
FAQRing Knowledge Base Software "id" SQL Injection Vulnerability
Online Work Order Suite (OWOS) SQL Injection and Cross Site Scripting
sNews "id" and "category" Parameters Remote SQL Injection Vulnerability
ActiveCampaign KnowledgeBuilder SQL Injection and Denial of Service
Helpdesk Issue Manager "issue.php" and "find.php" SQL Injection Issues
Nicecoder iDesk "cat_id" Parameter Remote SQL Injection Vulnerability
AgileBill "id" Parameter Handling Remote SQL Injection Vulnerability
IsolSoft Support Center "search.php" Remote SQL Injection Vulnerability
Pdjk-support Suite "index.php" Remote SQL Injection Vulnerability
phpWordPress Multiple Parameters Remote SQL Injection Vulnerability
Fantastic News "category" Parameter Remote SQL Injection Vulnerability
EZ Invoice "invoices.php" Script Remote SQL Injection Vulnerability
Ezyhelpdesk Multiple Parameters Remote SQL Injection Vulnerabilities
Omnistar Live "id" and "category_id" SQL Injection Vulnerability
digiSHOP Multiple SQL Injection and Full Path Disclosure Vulnerabilities
vTiger CRM Remote Code Execution and SQL Injection Vulnerabilities
freeForum "thread" Parameter Remote SQL Injection Vulnerability
Orca Forum "msg" Parameter Remote SQL Injection Vulnerability
Comdev Vote Caster "campaign_id" Remote SQL Injection Vulnerability
CommodityRentals Multiple Scripts "user_id" SQL Injection Vulnerability
WSN Forum "id" Parameter Handling Remote SQL Injection Vulnerability
1-2-3 Music Store "AlbumID" Parameter SQL Injection Vulnerability
AFFCommerce Shopping Cart "cl" and "item_id" SQL Injection Issue
PHP Labs Top Auction Multiple Scripts SQL Injection Vulnerabilities
PHP Labs Survey Wizard "sid" Parameter SQL Injection Vulnerability
Tunez Remote SQL Injection and Cross Site Scripting Vulnerabilities
Softbiz Web Hosting Directory Script SQL Injection Vulnerabilities
Joomla! Remote SQL Injection and Cross Site Scripting Vulnerabilities
OTRS Remote SQL Injection and Cross Site Scripting Vulnerabilities
PHP-Fusion Multiple SQL Injection and Path Disclosure Vulnerabilities
e-Quick Cart Multiple Scripts Remote SQL Injection Vulnerabilities
phpComasy "id" Parameter Handling SQL Injection Vulnerability
Nuke ET "query" Parameter Handling Remote SQL Injection Vulnerability
Unclassified NewsBoard "DateFrom" Remote SQL Injection Vulnerability
Interspire ArticleLive NX "Query" Remote SQL Injection Vulnerability
Arki-DB "catid" Parameter Handling Remote SQL Injection Vulnerability
PHP-Nuke "query" Parameter Handling Remote SQL Injection Issue
AlstraSoft Template Seller Pro SQL Injection and File Inclusion Issues
Peel "rubid" Parameter Handling Remote SQL Injection Vulnerability
Cyphor "id" Parameter Handling Remote SQL Injection Vulnerability
Wizz Forum Multiple Scripts Remote SQL Injection Vulnerabilities
WF-Downloads Module for Xoops "list" SQL Injection Vulnerability
Pearl Forums Remote SQL Injection and Directory Traversal Issues
Moodle Remote SQL Injection and Cross Site Scripting Vulnerabilities
Exponent CMS SQL Injection and Arbitrary File Upload Vulnerabilities
ASPKnowledgebase SQL Injection and Cross Site Scripting Issues
phpAdsNew and phpPgAds SQL Injection and Path Disclosure Issues
PHPKIT Remote SQL Injection and Command Execution Vulnerabilities
PHPlist Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Phorum "forum_ids" Parameter Remote SQL Injection Vulnerability
ibProArcade Module "user" Variable Remote SQL Injection Vulnerability
Gallery "galid" Parameter Handling Remote SQL Injection Vulnerability
JPortal Multiple "id" Parameter Remote SQL Injection Vulnerabilities
PHP Handicapper SQL Injection and Cross Site Scripting Vulnerabilities
News2Net "category" Parameter Remote SQL Injection Vulnerability
MailWatch for MailScanner SQL Injection and Directory Traversal
Invision Gallery "st" Parameter Remote SQL Injection Vulnerability
oaboard "channel" and "topic" Parameters SQL Injection Vulnerability
phpBB Remote Command Execution and SQL Injection Vulnerabilities
phpESP Unspecified SQL Injection and Cross Site Scripting Issues
Novell ZENworks Patch Management Multiple SQL Injection Vulnerabilities
Mantis Remote PHP File Inclusion and SQL Injection Vulnerabilities
Techno Dreams Multiple Products "login.asp" SQL Injection Vulnerability
gCards "limit" Parameter Handling Remote SQL Injection Vulnerability
Woltlab Burning Board "info_db.php" Remote SQL Injection Vulnerability
TClanPortal "id" Parameter Remote SQL Injection Vulnerability
Basic Analysis and Security Engine Remote SQL Injection Vulnerability
Nuked-Klan SQL Injection and Cross Site Scripting Vulnerabilities
PHP-Nuke Multiple Parameters and Modules SQL Injection Vulnerability
Zomplog Remote SQL Injection and Cross Site Scripting Vulnerabilities
MWChat "Username" Parameter Remote SQL Injection Vulnerability
Oracle Products Buffer Overflow and SQL Injection Vulnerabilities
e107 "a_name" Parameter Remote SQL Injection Vulnerability
PunBB "old_searches" Parameter Remote SQL Injection Vulnerability
phpWebSite Search Module Remote SQL Injection Vulnerability
versatileBulletinBoard SQL Injection and Cross-Site Scripting Issues
aspReady FAQ Manager Login Remote SQL Injection Vulnerability
Cyphor Remote SQL Injection and Cross-Site Scripting Vulnerabilities
Utopia News Pro SQL Injection and Cross-Site Scripting Vulnerabilities
aeNovo Remote SQL Injection and Cross-Site Scripting Vulnerabilities
PHP-Fusion "activate" and "cat_id" Remote SQL Injection Vulnerability
Additional Images Module for osCommerce SQL Injection Vulnerability
PHP-Fusion "photogallery.php" Remote SQL Injection Vulnerability
PHP-Fusion "msg_send" Parameter Remote SQL Injection Vulnerability
jPortal "download.php" Script Remote SQL Injection Vulnerability
phpMyFAQ Remote SQL Injection and File Inclusion Vulnerabilities
SEO-Board "user_pass_sha1" Remote SQL Injection Vulnerability
RSyslog Syslog Message Handling SQL Injection Vulnerability
Mailgust "email" Parameter Remote SQL Injection Vulnerability
Interchange Catalog Skeleton Remote SQL Injection Vulnerability
Mall23 eCommerce "AddItem.asp" Remote SQL Injection Vulnerability
My Little Forum "search.php" Remote SQL Injection Vulnerability
Digger Solutions Intranet Open Source SQL Injection Vulnerability
Zengaia Unspecified Remote SQL Injection Vulnerability
Land Down Under "Referer" Header SQL Injection Vulnerability
NooToplist "o" Parameter Remote SQL Injection Vulnerability
aeDating "search_result.php" Remote SQL Injection Vulnerability
Digital Scribe SQL Injection and Command Execution Vulnerability
Noah Classified SQL Injection and Cross-Site Scripting Vulnerabilities
ATutor "password_reminder.php" Remote SQL Injection Vulnerability
DeluxeBB Multiple Scripts Remote SQL Injection Vulnerabilities
Mall23 eCommerce "infopage.asp" Remote SQL Injection Vulnerability
PunBB Multiple SQL Injection and Cross Site Scripting Vulnerabilities
MyBulletinBoard "fid" and "icon" Remote SQL Injection Vulnerabilities
WEB//NEWS Multiple Scripts Remote SQL Injection Vulnerabilities
phpCommunityCalendar SQL Injection and Cross Site Scripting
myBloggie "login.php" Script Remote SQL Injection Vulnerability
PostNuke "dl-viewdownload.php" Remote SQL Injection Vulnerability
PaFileDB "user" Parameter Remote SQL Injection Vulnerability
PHPKit Multiple Parameters Remote SQL Injection Vulnerabilities
RunCMS Remote SQL Injection and Arbitrary Variable Overwrite
MyBulletinBoard Multiple Scripts Remote SQL Injection Vulnerabilities
Woltlab Burning Board "modcp.php" SQL Injection Vulnerability
PHPFreeNews SQL Injection and Cross Site Scripting Vulnerabilities
phpWebSite "module" Parameter Remote SQL Injection Vulnerability
ECW-Shop SQL Injection and Cross Site Scripting Vulnerabilities
PHPTB Topic Board Multiple Remote SQL Injection Vulnerabilities
MidiCart ASP Shopping Cart Remote SQL Injection Vulnerability
XMB Forum SQL Injection and Server Set Variable Overwrite Issues
phpIncludes News System "category" SQL Injection Vulnerability
PHPLite Calendar Express Cross Site Scripting and SQL Injection
Open Bulletin Board Multiple Remote SQL Injection Vulnerabilities
MyFAQ Multiple Scripts Remote SQL Injection Vulnerabilities
Gravity Board X SQL Injection and File Inclusion Vulnerabilities
Naxtor e-directory Remote SQL Injection and File Upload Issues
Naxtor Shopping Cart SQL Injection and Cross Site Scripting Issues
Silvernews "admin.php" Remote SQL Injection Vulnerability
OpenBook "admin.php" Credentials Remote SQL Injection Vulnerability
Kayako LiveResponse SQL Injection and Cross Site Scripting Issues
MySQL Eventum SQL Injection and Cross Site Scripting Issues
Thomson Web Skill Vantage Manager SQL Injection Vulnerability
UseBB Multiple SQL Injection and Cross Site Scripting Issues
VBZooM "SubjectID" Parameter Remote SQL Injection Vulnerability
Beehive Forum SQL Injection and Cross Site Scripting Vulnerability
Sendcard "sendcard.php" Remote SQL Injection Vulnerability
Contrexx SQL Injection and Cross Site Scripting Vulnerabilities
PHPNews "auth.php" Remote SQL Injection Vulnerability
ReviewPost PHP Pro "sort" Remote SQL Injection Vulnerability
VP-ASP Shopping Cart Multiple SQL Injection Vulnerabilities
Comersus Cart SQL Injection and Cross Site Scripting Vulnerabilities
Id Board Free "f" Parameter Remote SQL Injection Vulnerability
PhpAuction SQL Injection and Cross Site Scripting Vulnerabilities
PunBB Remote SQL Injection and Local File Inclusion Vulnerabilities
Covide Groupware-CRM User ID Remote SQL Injection Vulnerability
PHPWebSite SQL Injection and Cross site scripting vulnerabilities
Geeklog Unspecified Remote SQL Injection Vulnerability
Plague News System Remote SQL Injection and Posts Deletion
Cacti Multiple Code Execution and SQL Injection Vulnerabilities
osTicket "view.php" Remote SQL Injection Vulnerability
PHPNews "news.php" Remote SQL Injection Vulnerability
Xoops SQL Injection and Cross Site Scripting Vulnerabilities
WordPress SQL Injection and Cross Site Scripting Vulnerabilities
Plans "evt_id" Parameter Remote SQL Injection Vulnerability
Dynamic Biz Website Builder (QuickWeb) SQL Injection Vulnerability
ActiveBuyAndSell Multiple SQL Injection and Cross Site Scripting
UBB.Threads Cross Site Scripting and SQL Injection Vulnerabilities
IpSwitch WhatsUp Professional Remote SQL Injection Vulnerability
Simple Machines "msg" Parameter Remote SQL Injection Vulnerability
Multiple DUware Products Remote SQL Injection Vulnerability
MercuryBoard "User-Agent" SQL Injection Vulnerability
Cacti Multiple File Inclusion and SQL Injection Vulnerabilities
paFaq SQL Injection and Cross Site Scripting Vulnerabilities
Fortibus CMS "WeeklyNotesDisplay.asp" SQL Injection Vulnerability
Ublog Reload SQL Injection and Cross Site Scripting Vulnerabilities
Cool Cafe SQL Injection and Information Disclosure Vulnerabilities
Mambo "user_rating" Parameter Remote SQL Injection Vulnerability
Invision Gallery Two Remote SQL Injection Vulnerabilities
Livingcolor Livingmailing "login.asp" SQL Injection Vulnerability
JiRos Upload System Remote SQL Injection Vulnerability
Calendarix Advanced Multiple SQL Injection Vulnerabilities
Hosting Controller "jresourceid" SQL Injection Vulnerability
India Software Solution Shopping Cart SQL Injection Vulnerability
X-Cart Gold SQL Injection and Cross Site Scripting Vulnerabilities
NewLife Blogger Multiple Unspecified SQL Injection Vulnerabilities
WordPress "cat_ID" Remote SQL Injection Vulnerability
NPDS Multiple SQL Injection and Cross Site Scripting Vulnerabilities
PostNuke SQL Injection and Cross Site Scripting Vulnerabilities
OS4E "Password" Parameter Remote SQL Injection Vulnerability
ZonGG "password" Remote SQL Injection Vulnerability
FunkyASP AD System "admin.asp" SQL Injection Vulnerability
Active News Manager "login.asp" SQL Injection Vulnerability
Distinct Web Creations NewsletterEZ SQL Injection Vulnerability
JiRo's Statistics System Remote SQL Injection Vulnerability
PortailPHP "index.php" Remote SQL Injection Vulnerability
Shop-Script "index.php" Two SQL Injection Vulnerabilities
Woltlab Burning Board "email" SQL Injection Vulnerability
ASP Virtual News Manager "password" SQL Injection Vulnerability
DirectTopics SQL Injection and Full Path Disclosure Vulnerabilities
Quick.cart SQL Injection and Cross Site Scripting Vulnerabilities
Quick.Forum SQL Injection and Cross Site Scripting Vulnerabilities
CJ Ultra Plus "out.php" Remote SQL Injection Vulnerability
Invision Power Board SQL Injection and Cross Site Scripting
PHP-Nuke SQL Injection and Cross Site Scripting Vulnerabilities
FishCart SQL Injection and Cross Site Scripting Vulnerabilities
phpBB Personal Notes Mod Remote SQL Injection Vulnerability
PHP-Calendar "search.php" Unspecified SQL Injection Vulnerability
phpCoin Multiple Remote SQL Injection Vulnerabilities
Metalinks MetaBid Auctions Multiple SQL Injection Vulnerabilities
Metalinks MetaCart/MetaCart2 Multiple SQL Injection Vulnerabilities
Invision Power Board "qpid" Remote SQL Injection Vulnerability
CartWIZ Cross Site Scripting and SQL Injection Vulnerabilities
StorePortal "default.asp" Multiple SQL Injection Vulnerabilities
eGroupWare SQL Injection and Cross Site Scripting Vulnerabilities
FlexPHPNews "newsid" Parameter Remote Remote SQL Injection Vulnerability
ASPNuke Cross Site Scripting and SQL Injection Vulnerabilities
phpBB-Auction SQL Injection and Path Disclosure Vulnerabilities
Zoom Media Gallery "index.php" Remote SQL Injection Vulnerability
Invision Power Board "memberlist.php" SQL Injection Vulnerability
Squirrelcart PHP Shopping Cart SQL Injection Vulnerability
PHPMyFamily Multiple Remote SQL Injection Vulnerabilities
SimpGB "Guestbook.php" Remote SQL Injection Vulnerability
ProjectBB Cross Site Scripting and SQL Injection Vulnerabilities
iGeneric iG Shop Multiple Remote SQL Injection Vulnerabilities
PHP-Arena PaFaq Multiple SQL Injection Vulnerabilities
WebCalendar "webcalendar_session" SQL Injection Vulnerability
DCP-Portal Multiple SQL Injection and XSS Vulnerabilities
ASPJar Guestbook "login.asp" SQL Injection Vulnerability
MyPHP Forum Multiple SQL Injection Vulnerabilities
MercuryBoard "qu" Parameter SQL Injection Vulnerability
Chipmunk Forums Multiple SQL Injection Vulnerabilities
CMScore Multiple SQL Injection Vulnerabilities
100 last CVE   CVE-2015-6535
CVE-2015-6513
CVE-2015-5532
CVE-2015-5472
CVE-2015-5471
CVE-2015-5469
CVE-2015-5461
CVE-2015-5078
CVE-2015-4634
CVE-2015-4628
CVE-2015-4454
CVE-2015-4342
CVE-2015-4109
CVE-2015-4010
CVE-2015-3637
CVE-2015-3173
CVE-2015-2973
CVE-2015-2967
CVE-2015-2665
CVE-2015-0715
CVE-2015-0270
CVE-2014-9506
CVE-2014-9442
CVE-2014-9388
CVE-2014-9305
CVE-2014-9280
CVE-2014-9272
CVE-2014-9271
CVE-2014-9270
CVE-2014-9269
CVE-2014-9220
CVE-2014-9173
CVE-2014-9096
CVE-2014-9095
CVE-2014-9089
CVE-2014-9057
CVE-2014-8988
CVE-2014-8987
CVE-2014-8986
CVE-2014-8810
CVE-2014-8598
CVE-2014-8596
CVE-2014-8554
CVE-2014-8553
CVE-2014-8089
CVE-2014-7871
CVE-2014-7146
CVE-2014-6387
CVE-2014-6316
CVE-2014-5308
CVE-2014-5262
CVE-2014-5261
CVE-2014-4858
CVE-2014-4002
CVE-2014-3210
CVE-2014-3119
CVE-2014-2709
CVE-2014-2708
CVE-2014-2540
CVE-2014-2326
CVE-2014-1619
CVE-2014-1466
CVE-2014-0794
CVE-2013-6875
CVE-2013-6839
CVE-2013-6164
CVE-2013-6163
CVE-2013-5743
CVE-2013-5589
CVE-2013-5588
CVE-2013-3527
CVE-2013-1804
CVE-2013-1803
CVE-2012-5849
CVE-2012-5454
CVE-2012-5453
CVE-2012-5169
CVE-2012-5168
CVE-2012-5167
CVE-2012-4990
CVE-2012-4989
CVE-2012-4773
CVE-2012-4772
CVE-2012-4771
CVE-2012-4602
CVE-2012-4601
CVE-2012-3840
CVE-2012-3839
CVE-2012-2962
CVE-2012-2937
CVE-2012-2936
CVE-2012-2436
CVE-2012-2435
CVE-2012-1781
CVE-2012-1780
CVE-2012-1673
CVE-2012-1665
CVE-2012-1664
CVE-2012-0995
CVE-2012-0994


 
 
 
 
 Risk level 
Low