CVE Vulnerability Catalog

SQL injection vulnerability in session.php in DotClear before version 1.2.3. A remote attacker can execute arbitrary SQL commands via the dc_xd parameter in a cookie.

SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors.

WebCalendar 1.0.1 contains multiple SQL injection vulnerabilities in the startid, template, and other parameters, allowing remote attackers to execute arbitrary SQL commands.

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.

SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the SURVEY_ID parameter.

SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter.

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter in index.php, faq_qanda.php, refer_friend.php, print_article.php, and add_comment.php.

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.

SQL injection vulnerability in Event Calendar 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 'm' parameter in index.php.

SQL injection vulnerability in okiraku.php of O-Kiraku Nikki version 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the day_id parameter.

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer.

SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the node and art_id parameters.

PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the __f parameter.

SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter.

SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL commands via the sid parameter.

SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter in index.php and download.php, or the ckode parameter in baca.php.

Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the FAQ_ID and action parameters in viewFAQ.php, and the CATEGORY_ID parameter in index.php.

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the 'category' and 'type' parameters to viewcat.php, or certain search parameters. The affected version is reported as 1.0.

Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the catid, perpage, ascdesc, and orderlinks parameters in a displaycat action in index.php, and the id parameter in comments.php and memberlist.php.