Vulnerabilities (CVE)

Filtered by CWE-89
Total 20717 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-3787 1 Nullscripts 1 Web Directory Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in listing_view.php in Web Directory Script 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter.
CVE-2008-3785 1 Miacms 1 Miacms 2026-06-16 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in the com_content component in MiaCMS 4.6.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) view, (2) category, or (3) blogsection action to index.php.
CVE-2008-3784 2 Btitracker Project, Xbtitracker Project 2 Btitracker, Xbtitracker 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in scrape.php in BtiTracker 1.4.7 and earlier and xBtiTracker 2.0.542 and earlier allows remote attackers to execute arbitrary SQL commands via the info_hash parameter.
CVE-2008-3783 1 Matterdaddy 1 Matterdaddy Market 2026-06-16 6.8 MEDIUM N/A
Multiple SQL injection vulnerabilities in index.php in Matterdaddy Market 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters.
CVE-2008-3780 1 Review-script 1 Five Star Review Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
CVE-2008-3774 1 Simasy 1 Simasy Cms 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in index.php in Simasy CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3772 1 Pars4u 1 Videosharing 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in categories_portal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVE-2008-3768 1 Turnkeywebtools 1 Sunshop Shopping Cart 2026-06-16 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an edit_registry action to index.php, (2) a vector involving the check_email function, and other vectors.
CVE-2008-3767 1 Smartisoft 1 Phpbazar 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter.
CVE-2008-3765 1 Discountedscripts 1 Quick Poll Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3762 1 Turnkeywebtools 1 Php Live Helper 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php.
CVE-2008-3757 1 Yourfreeworld 1 Forced Matrix Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3756 1 Yourfreeworld 1 Viral Marketing Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3755 1 Yourfreeworld 1 Classifieds 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVE-2008-3754 1 Yourfreeworld 1 Stylish Text Ads Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3753 1 Yourfreeworld 1 Programs Rating Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3752 1 Yourfreeworld 1 Ad-exchange Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3751 1 Yourfreeworld 1 Short Url And Url Tracker Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3750 1 Yourfreeworld 1 Url Rotator Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3749 1 Yourfreeworld 1 Banner Management Script 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter.