CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2011(SQL Injection)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2010-4945 89 3 Exec Code Sql 2011-10-09 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
2 CVE-2011-1667 89 2 Exec Code Sql 2011-04-09 2017-08-16
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action.
3 CVE-2010-5062 89 2 Exec Code Sql 2011-11-22 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter.
4 CVE-2010-5061 89 2 Exec Code Sql 2011-11-22 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in RSStatic allows remote attackers to execute arbitrary SQL commands via the maxarticles parameter.
5 CVE-2010-5060 89 2 Exec Code Sql 2011-11-22 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter.
6 CVE-2010-5059 89 2 Exec Code Sql 2011-11-22 2012-01-10
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action.
7 CVE-2010-5057 89 2 Exec Code Sql 2011-11-22 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL commands via the tipodoc_id parameter.
8 CVE-2010-5056 89 2 Exec Code Sql 2011-11-22 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the face_id parameter in a show_face action to index.php.
9 CVE-2010-5055 89 2 Exec Code Sql 2011-11-22 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
10 CVE-2010-5053 89 2 Exec Code Sql 2011-11-22 2011-11-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a prod_desc action to index.php.
11 CVE-2010-5047 89 2 Exec Code Sql 2011-11-22 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
12 CVE-2010-5037 89 2 Exec Code Sql 2011-11-02 2012-02-13
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
13 CVE-2010-5036 89 2 Exec Code Sql 2011-11-02 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.
14 CVE-2010-5034 89 2 Exec Code Sql 2011-11-02 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands via the planid parameter.
15 CVE-2010-5033 89 2 Exec Code Sql 2011-11-02 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL commands via the CatDisplay parameter.
16 CVE-2010-5026 89 2 Exec Code Sql 2011-11-02 2017-08-28
6.8
None Remote Medium Not required Partial Partial Partial
SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information.
17 CVE-2010-5023 89 2 Exec Code Sql 2011-11-02 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.
18 CVE-2010-5021 89 2 Exec Code Sql 2011-11-02 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter.
19 CVE-2010-5019 89 2 Exec Code Sql 2011-11-02 2011-11-17
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.
20 CVE-2010-5013 89 2 Exec Code Sql 2011-11-02 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter.
21 CVE-2010-5012 89 2 Exec Code Sql 2011-11-02 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.
22 CVE-2010-5011 89 2 Exec Code Sql 2011-11-02 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arbitrary SQL commands via the session parameter.
23 CVE-2010-5009 89 2 Exec Code Sql 2011-11-02 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action.
24 CVE-2010-5008 89 2 Exec Code Sql 2011-11-02 2012-02-13
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter.
25 CVE-2010-5003 89 2 Exec Code Sql 2011-11-01 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial action to index.php. NOTE: some of these details are obtained from third party information.
26 CVE-2010-5000 89 2 Exec Code Sql 2011-11-02 2012-02-13
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the myusername parameter (aka Username field) in a do_login action. NOTE: some of these details are obtained from third party information.
27 CVE-2010-4995 89 2 Exec Code Sql 2011-11-01 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offer_view action to index.php, a different vector than CVE-2007-4506.
28 CVE-2010-4994 89 2 Exec Code Sql 2011-11-01 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the Jobs Pro component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the detailed_results parameter to search_jobs.html.
29 CVE-2010-4993 89 2 Exec Code Sql 2011-11-01 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
30 CVE-2010-4992 89 2 Exec Code Sql 2011-11-01 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the type parameter to add.html.
31 CVE-2010-4984 89 2 Exec Code Sql 2011-11-01 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box.
32 CVE-2010-4983 89 2 Exec Code Sql 2011-11-01 2018-10-10
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
33 CVE-2010-4980 89 2 Exec Code Sql 2011-11-01 2018-10-10
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.
34 CVE-2010-4974 89 2 Exec Code Sql 2011-11-01 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter.
35 CVE-2010-4972 89 2 Exec Code Sql 2011-11-01 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncat_id parameter.
36 CVE-2010-4970 89 2 Exec Code Sql 2011-11-01 2012-02-13
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter.
37 CVE-2010-4968 89 2 Exec Code Sql 2011-11-01 2012-02-13
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
38 CVE-2010-4959 89 2 Exec Code Sql 2011-10-09 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter.
39 CVE-2010-4955 89 2 Exec Code Sql 2011-10-09 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078.
40 CVE-2010-4954 89 2 Exec Code Sql 2011-10-09 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.
41 CVE-2010-4942 89 2 Exec Code Sql 2011-10-09 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter.
42 CVE-2010-4940 89 2 Exec Code Sql 2011-10-09 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
43 CVE-2010-4933 89 2 Exec Code Sql 2011-10-09 2012-02-13
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter.
44 CVE-2010-4927 89 2 Exec Code Sql 2011-10-09 2012-02-13
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a country action to index.php.
45 CVE-2010-4926 89 2 Exec Code Sql 2011-10-09 2018-10-10
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ct_id parameter in a timetrack action to index.php.
46 CVE-2010-4925 89 2 Exec Code Sql 2011-10-09 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL commands via the id parameter.
47 CVE-2010-4921 89 2 Exec Code Sql 2011-10-08 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQL commands via the QuestionID parameter in a results action.
48 CVE-2010-4917 89 2 Exec Code Sql 2011-10-08 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter.
49 CVE-2010-4916 89 2 Exec Code Sql 2011-10-08 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.
50 CVE-2010-4915 89 2 Exec Code Sql 2011-10-08 2017-08-28
7.5
None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action.
Total number of vulnerabilities : 294   Page : 1 (This Page)2 3 4 5 6
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.