CVE Vulnerability

CWE-89

CVE-2008-4897

by

SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the art parameter.

CVE-2008-4900

by

SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2008-4901

by

SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVE-2008-4902

by

SQL injection vulnerability in contact_author.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter.

CVE-2008-4904

by

SQL injection vulnerability in the “Manage pages” feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with “blog publisher” rights to execute arbitrary SQL commands via the search[published_at] parameter.

CVE-2008-4906

by

SQL injection vulnerability in lyrics_song.php in the Lyrics (lyrics_menu) plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the l_id parameter. NOTE: some of these details are obtained from third party information.