Vulnerabilities (CVE)

Filtered by CWE-89
Total 12885 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1520 1 Fuzzymonkey 1 Myclassifieds 2024-02-28 6.8 MEDIUM N/A
SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVE-2002-2304 1 Myphpsoft 1 Myphplinks 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter.
CVE-2004-1553 1 Fullrevolution 1 Aspwebalbum 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the cat parameter to album.asp. NOTE: it was later reported that vector 1 affects aspWebAlbum 3.2, and the vector involves the txtUserName parameter in a processlogin action to album.asp, as reachable from the login action.
CVE-2003-1435 1 Francisco Burzi 1 Php-nuke 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module.
CVE-2003-1504 1 Goldscripts 1 Goldlink 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) vadmin_login or (2) vadmin_pass cookie in a request to goldlink.php.