11858 matches found
iSupport 1.8 SQL Injection
iSupport 1.8 SQL Injection Vulnerability Date: 2011-06-23 Author: Brendan Coles / / Advisory: http://itsecuritysolutions.org/2011-06-23-iSupport-1.8-SQL-Injection-Vulnerability/ Software: iSupport Version: = 1.8 Homepage: http://www.idevspot.com/iSupport.php Google Dork: "Powered by iSupport 1.8 ...
iGiveTest 2.1.0 SQL Injection Vulnerability
Exploit for php platform in category web applications iGiveTest 2.1.0 SQL Injection Vulnerability Brendan Coles 2011-03-20 Summary : There is an SQL Injection vulnerability in iGiveTest 2.1.0 which may allow an attacker to take control of the software. Software : Software Link: iGiveTest...
CVE-2011-1328
SQL injection vulnerability in RADVISION iVIEW Suite before 7.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in RADVISION iVIEW Suite before 7.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-1328
SQL injection vulnerability in RADVISION iVIEW Suite before 7.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-2149
Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain parameters to 1 Admin/frmSite.aspx, 2 Default.aspx, 3 Services/SiteAdmin.asmx, or 4 Client/frmViewReports.aspx; certain cookies to 5...
CVE-2011-0960
Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager CUOM before 8.6 allow remote attackers to execute arbitrary SQL commands via 1 the CCMs parameter to iptm/PRTestCreation.do or 2 the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716...
Sql injection
Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager CUOM before 8.6 allow remote attackers to execute arbitrary SQL commands via 1 the CCMs parameter to iptm/PRTestCreation.do or 2 the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716...
Sql injection
Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain parameters to 1 Admin/frmSite.aspx, 2 Default.aspx, 3 Services/SiteAdmin.asmx, or 4 Client/frmViewReports.aspx; certain cookies to 5...
CVE-2011-0960
Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager CUOM before 8.6 allow remote attackers to execute arbitrary SQL commands via 1 the CCMs parameter to iptm/PRTestCreation.do or 2 the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716...
CVE-2011-2141
SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-2141
SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4284
SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server DMS before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4284
SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server DMS before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-1903
SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
Sql injection
SQL injection vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtg85647...
Sql injection
Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15su4, 8.0 before 8.03asu2, and 8.5 before 8.51su1 allow remote attackers to execute...
CVE-2011-1522
Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL commands via the 1 limit or 2 offset field...
SQL Injection Vulnerability in SuperCali PHP Event Calendar
High-Tech Bridge SA Security Research Lab has discovered vulnerability in SuperCali PHP Event Calendar which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in SuperCali PHP Event Calendar The vulnerability exists due to input sanitation errors in the "categoryi...