CVE-2015-6911

Synology Video Station is affected by CVE-2015-6911 (versions before 1.5-0763). The vulnerability is a SQL injection in the watchstatus.cgi endpoint triggered via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Affected product: Synology Video Station (before 1.5-07...

CVE-2013-6911

Cross-site scripting XSS vulnerability in the bulletin-board component in Cybozu Garoon before 3.7.2, when Internet Explorer or Firefox is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6911

The CVE-2013-6911 entry documents a cross-site scripting (XSS) vulnerability in the bulletin-board component of Cybozu Garoon prior to 3.7.2. The issue can be exploited by remote authenticated users when using Internet Explorer or Firefox to inject arbitrary script/HTML via unspecified vectors. T...

CVE-2008-6911

The CVE-2008-6911 entry describes an SQL injection in BrewBlogger (BB) 2.1.0.1. Affected component: authenticateUser in includes/authentication.inc.php; vulnerability occurs when magic_quotes_gpc is disabled. Exploitation vector: remote attacker supplies input to loginUsername via includes/loginc...

CVE-2006-6911

CVE-2006-6911 describes an SQL injection vulnerability in search.asp of Digitizing Quote And Ordering System 1.0. The underlying issue is improper sanitization of the ordernum parameter, allowing authenticated remote users to manipulate SQL queries. Impact per sources: potential arbitrary SQL exe...