Vulnerabilities (CVE)

Filtered by CWE-89
Total 11922 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-2716 1 Rich Kavanagh 1 Psnews 2017-08-17 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) ndetail.php and (2) print.php.
CVE-2010-2714 1 Tcwonline 1 Tcw Php Album 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album parameter.
CVE-2010-2696 1 Sijio 1 Community Software 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitrary SQL commands via the parent parameter.
CVE-2010-2691 1 2daybiz 1 Custom T-shirt Design Script 2017-08-17 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the (1) sbid parameter to products_details.php, (2) pid parameter to products/products.php, and (3) designid parameter to designview.php.
CVE-2010-2688 1 Site2nite 1 Boat Classifieds 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVE-2010-2687 1 Site2nite 1 Boat Classifieds 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter.
CVE-2010-2684 1 Customerparadigm 1 Pagedirector Cms 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-2674 1 Alanzard 1 Tsoka\ 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an articolo action.
CVE-2010-2670 1 Brotherscripts 1 Recipe Website 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-2635 1 Ibm 1 Websphere Commerce 2017-08-17 6.5 MEDIUM N/A
SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admin Console JavaServer pages."
CVE-2010-2623 1 Internetdm 1 Bed And Breakfast 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the pp_id parameter.
CVE-2010-2622 2 Joomanager, Joomla 2 Joomanager, Joomla\! 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
CVE-2010-2616 1 Paul Mcenery 1 Php Bible Search 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitrary SQL commands via the chapter parameter.
CVE-2010-2611 1 I-netsolution 1 Job Search Engine Script 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in show_search_result.php in i-netsolution Job Search Engine allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
CVE-2010-2610 1 2daybiz 1 Job Site Script 2017-08-17 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL commands via the (1) jid parameter to view_current_job.php, (2) job_iid parameter to show_search_more.php, and (3) left_cat parameter to show_search_result.php.
CVE-2010-2609 1 2daybiz 1 Job Search Engine Script 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
CVE-2010-2462 1 Tomacero 1 Orohyip 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in withdraw_money.php in Toma Cero OroHYIP allows remote attackers to execute arbitrary SQL commands via the id parameter in a cancel action.
CVE-2010-2461 1 Jce-tech 1 Overstock Script 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter.
CVE-2010-2460 1 Jce-tech 1 Shareasale Script 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS) 1 allows remote attackers to execute arbitrary SQL commands via the mechant_id parameter.
CVE-2010-2459 1 2daybiz 1 Video Community Portal Script 2017-08-17 7.5 HIGH N/A
SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter.