Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
Docs
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sql injection vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2006-6354
Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote malicious users to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter. NOTE: the iType parameter in type.asp is covered by CVE-2005-3976.
Duware Duamazon 3.0
Duware Duamazon 3.1
Duware Duarticle 1.0
Duware Duarticle 1.1
Duware Duclassified 4.0
Duware Duclassified 4.1
Duware Duclassified 4.2
Duware Dudirectory 3.0
Duware Dudirectory 3.1
Duware Dudirectory Pro 3.0
Duware Dudirectory Pro 3.1
Duware Dudirectory Pro Sql 3.0
7.5
CVSSv2
CVE-2005-3976
SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 a...
Duware Duamazon 3.1
Duware Duarticle 1.1
Duware Duclassified 4.2
Duware Dudirectory 3.1
Duware Dudirectory Pro 3.0
Duware Dudirectory Pro Sql 3.0
Duware Dudownload 1.1
Duware Dugallery 3.3
Duware Dunews 1.1
Duware Dupaypal 3.1
Duware Dupaypal Pro 3.0
7.8
CVSSv2
CVE-2012-5416
Buffer overflow in Cisco Unified MeetingPlace Web Conferencing prior to 7.1MR1 Patch 1, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 allows remote malicious users to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua6634...
Cisco Unified Meetingplace
Cisco Unified Meetingplace 7.0
Cisco Unified Meetingplace 7.0.1
Cisco Unified Meetingplace 7.0.2
Cisco Unified Meetingplace 7.0.3
Cisco Unified Meetingplace 7.1
Cisco Unified Meetingplace 8.0
Cisco Unified Meetingplace 8.5
Cisco Unified Meetingplace 8.5.1
Cisco Unified Meetingplace 8.5.2
Cisco Unified Meetingplace 8.5.3
Cisco Unified Meetingplace 8.5.4
7.5
CVSSv2
CVE-2015-6962
SQL injection vulnerability in the web application in Farol allows remote malicious users to execute arbitrary SQL commands via the email parameter to tkmonitor/estrutura/login/Login.actions.php.
Teiko Farol -
1 EDB exploit
7.5
CVSSv2
CVE-2005-2989
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote malicious users to execute arbitrary SQL commands via the (1) tid parameter to topic.php, the uid parameter to (2) misc.php or (3) pm.php, or the fid parameter to (3) forums.php or (4) newpost.php.
Deluxebb Deluxebb 1.0
Deluxebb Deluxebb 1.05
5 EDB exploits
7.5
CVSSv2
CVE-2009-2439
Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote malicious users to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php. NOTE: this is a produ...
Web Development House Alibaba Clone
2 EDB exploits
6.8
CVSSv2
CVE-2006-5829
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) choosed_language parameter to (a) cp_dpage.php, (b) cp_news.php, (c) cp_forum_view.php, (d) cp_edit_...
Aiocp Aiocp
Aiocp Aiocp 1.3.000
Aiocp Aiocp 1.3.001
Aiocp Aiocp 1.3.002
Aiocp Aiocp 1.3.003
Aiocp Aiocp 1.3.004
Aiocp Aiocp 1.3.005
Aiocp Aiocp 1.3.006
12 EDB exploits
7.5
CVSSv2
CVE-2013-7189
Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote malicious users to execute arbitrary SQL commands via the cmbdomain parameter to (1) checktransferstatus.php, (2) checktransferstatusbck.php, or (3) additionalsettings.php; or (4) invno para...
Iscripts Autohoster 2.4
4 EDB exploits
7.5
CVSSv2
CVE-2008-5781
SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote malicious users to execute arbitrary SQL commands via the title parameter.
Cfagcms Cfagcms 1.0
2 EDB exploits
7.5
CVSSv2
CVE-2008-4178
SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote malicious users to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from thi...
Downline Goldmine Builder
Downline Goldmine Builder Special Category Addon
Downline Goldmine Builder Unknown
Downline Goldmine New Addon
Downline Goldmine New Addon Pro
4 EDB exploits
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
inject
CVE-2025-51381
IDOR
nvidia
CVE-2025-4123
CVE-2025-2783
CVE-2025-30678
remote attackers
CVE-2025-48443
kcm3100
CVE-2025-6196
tarteaucitron.io
adrian ladó
earch icon">CVE-2023-33538
Home
/
Search Results
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »