Vulnerabilities (CVE)

Filtered by CWE-89
Total 11922 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-5350 1 Wordpress 2 Pay-with-tweet, Wordpress 2017-08-29 6.0 MEDIUM N/A
SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode.
CVE-2012-5348 1 Wilson Steven 1 Mangosweb Enhanced 2017-08-29 6.8 MEDIUM N/A
SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via the login parameter in a login action to index.php.
CVE-2012-5342 1 Michau Enterprises Llc 1 Commonsense Cms 2017-08-29 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) special.php, (2) article.php, or (3) cat2.php.
CVE-2012-5334 1 Preprojects 1 Pre Printing Press 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter.
CVE-2012-5333 1 Preprojects 1 Pre Printing Press 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2012-5313 1 Snitz Communications 1 Snitz Forums 2000 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in forum.asp in Snitz Forums 2000 allows remote attackers to execute arbitrary SQL commands via the TOPIC_ID parameter.
CVE-2012-5312 1 Tribiq 1 Tribiq Cms 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVE-2012-5310 2 Getshopped, Wordpress 2 Wp E-commerce, Wordpress 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2012-5300 1 Mystorexpress 1 Tienda Virtual 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in art_catalogo.php in MyStore Xpress Tienda Virtual 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2012-5297 1 Mavili Guestbook Project 1 Mavili Guestbook 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2012-5294 1 Mystorexpress 1 Tienda Virtual 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in art_detalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2012-5292 1 Atar2b 1 Atar2b Cms 2017-08-29 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) gallery_e.php, (2) pageE.php, or (3) pageH.php.
CVE-2012-5291 1 Possesports 1 Posse Softball Director Cms 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to execute arbitrary SQL commands via the idteam parameter.
CVE-2012-5290 1 Wcs4web 1 Easywebrealestate 2017-08-29 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands via the (1) lstid parameter to listings.php or (2) infoid parameter to index.php.
CVE-2012-5289 1 Plogger 1 Plogger 2017-08-29 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) index.php or (2) gallery.php.
CVE-2012-5288 1 Accomplishtechnology 1 Phpmydirectory 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2012-5244 1 Bananadance 1 Banana Dance 2017-08-29 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) return, (2) display, (3) table, or (4) search parameter to functions/suggest.php; (5) the id parameter to functions/widgets.php, (6) the category parameter to functions/print.php; or (7) the name parameter to functions/ajax.php.
CVE-2012-5227 1 Peel 1 Peel Shopping 2017-08-29 7.5 HIGH N/A
SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2012-5167 1 Atutor 1 Acontent 2017-08-29 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL commands via the (1) field parameter to course_category/index_inline_editor_submit.php or (2) user/index_inline_editor_submit.php; or (3) id parameter to user/user_password.php.
CVE-2012-5162 1 Osclass 1 Osclass 2017-08-29 6.5 MEDIUM N/A
Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) edit_category_post or (2) enable_category action to index.php.