Vulnerabilities (CVE)

Filtered by CWE-89
Total 19511 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-6329 1 Preproject 1 Pre Asp Job Board 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password parameters, as reachable from Employee/emp_login.asp. NOTE: some of these details are obtained from third party information.
CVE-2008-6328 1 Butterflymedia 1 Butterfly Organizer 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-6327 1 Manzovi 1 Proquiz 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312.
CVE-2008-6326 1 Simplecustomer 1 Simple Customer 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2008-6324 1 Cfmsource 1 Cf Forum 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter.
CVE-2008-6323 1 Cfmsource 1 Cf Auction 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in forummessages.cfm in CFMSource CF_Auction allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter.
CVE-2008-6322 1 Cfmsource 1 Cfmblog 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in index.cfm in CFMSource CFMBlog allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter.
CVE-2008-6320 1 Cfshopkart 1 Cf Shopkart 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category parameter in a ViewCategory action.
CVE-2008-6319 1 Cfmsource 1 Cf Calendar 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in calendarevent.cfm in CF_Calendar allows remote attackers to execute arbitrary SQL commands via the calid parameter.
CVE-2008-6314 1 Phpbb 2 Phpbb, Tag Board 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action.
CVE-2008-6312 1 Manzovi 1 Proquiz 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVE-2008-6311 1 Butterflymedia 1 Butterfly Organizer 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name.
CVE-2008-6310 1 W3matter 1 Revsense 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL commands via the f[password] parameter. NOTE: some of these details are obtained from third party information.
CVE-2008-6309 1 W3matter 1 Askpert 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands via the f[password] parameter. NOTE: some of these details are obtained from third party information.
CVE-2008-6304 1 Xt-commerce 1 Xt-commerce 2026-06-16 6.8 MEDIUM N/A
SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magic_quotes_gpc is enabled and the SEO URLs are activated, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-6303 1 Toursmanager 1 Tours Manager 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands via the tourid parameter.
CVE-2008-6301 2 Phpbb, Prezmo 2 Phpbb, Small Shoutbox 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in shoutbox_view.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action.
CVE-2008-6289 1 Toursmanager 1 Tours Manager 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter.
CVE-2008-6286 1 Activewebsoftwares 1 Active Newsletter 2026-06-16 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp or (b) start.asp. NOTE: some of these details are obtained from third party information.
CVE-2008-6285 1 Businessvein 1 Php Tv Portal 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in index.php in PHP TV Portal 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the mid parameter.