CWE-89 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-89/ Sun, 26 Feb 2023 09:11:57 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-89 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-89/ 32 32 CVE-2008-7267 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7267/ Sun, 26 Feb 2023 09:11:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7267/ SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.

The post CVE-2008-7267 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.

The post CVE-2008-7267 appeared first on CVE Vulnerability.

]]> CVE-2008-7301 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7301/ Sun, 26 Feb 2023 09:11:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7301/ SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-7301 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-7301 appeared first on CVE Vulnerability.

]]> CVE-2008-7302 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7302/ Sun, 26 Feb 2023 09:11:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7302/ SQL injection vulnerability in netinvoice.php in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving “knowledge of … the contents of an encrypted file.”

The post CVE-2008-7302 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in netinvoice.php in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving “knowledge of … the contents of an encrypted file.”

The post CVE-2008-7302 appeared first on CVE Vulnerability.

]]> CVE-2008-7208 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7208/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7208/ Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username parameter ($usernameb variable) to a_login.php or (2) user parameter to staff.php.

The post CVE-2008-7208 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username parameter ($usernameb variable) to a_login.php or (2) user parameter to staff.php.

The post CVE-2008-7208 appeared first on CVE Vulnerability.

]]> CVE-2008-7210 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7210/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7210/ directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a numeric parameter with a value matching the s parameter’s hash value, which prevents the associated $_GET[“s”] variable from being unset. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP […]

The post CVE-2008-7210 appeared first on CVE Vulnerability.

]]> directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a numeric parameter with a value matching the s parameter’s hash value, which prevents the associated $_GET[“s”] variable from being unset. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in AJChat.

The post CVE-2008-7210 appeared first on CVE Vulnerability.

]]> CVE-2008-7226 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7226/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7226/ SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the recipeid parameter.

The post CVE-2008-7226 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the recipeid parameter.

The post CVE-2008-7226 appeared first on CVE Vulnerability.

]]> CVE-2008-7145 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7145/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7145/ Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters.

The post CVE-2008-7145 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters.

The post CVE-2008-7145 appeared first on CVE Vulnerability.

]]> CVE-2008-7153 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7153/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7153/ SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code using the INTO DUMPFILE command.

The post CVE-2008-7153 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header. NOTE: this can be leveraged to execute arbitrary PHP code using the INTO DUMPFILE command.

The post CVE-2008-7153 appeared first on CVE Vulnerability.

]]> CVE-2008-7169 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7169/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7169/ SQL injection vulnerability in Jabode horoscope extension (com_jabode) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a sign task to index.php.

The post CVE-2008-7169 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in Jabode horoscope extension (com_jabode) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a sign task to index.php.

The post CVE-2008-7169 appeared first on CVE Vulnerability.

]]> CVE-2008-7114 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7114/ Sun, 26 Feb 2023 09:11:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7114/ SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the name field.

The post CVE-2008-7114 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the name field.

The post CVE-2008-7114 appeared first on CVE Vulnerability.

]]>