PT-2016-1064

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4 through 12.1.0.2 Description The issue is related to errors in the code of the Database Vault component in Oracle Database systems. It may allow a remote attacker to modify, add, or delete data by...

CVE-2015-3947

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-3947

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-3947: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-8769

SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2016-4010

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.4.7 Description A SQL injection issue allows attackers to execute arbitrary SQL commands. Recommendations For versions prior to 3.4.7, update to version 3.4.7 or later to resolve the issue...

CVE-2015-8769: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...

CVE-2015-6433

SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...

CVE-2015-6433

CVE-2015-6433 describes an SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225). An authenticated remote user can exploit a crafted URL to execute arbitrary SQL commands on the backend. The issue stems from improper validation of user-supplied input in SQL queries...

PT-2016-1016

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 11.00.98000.225 Description The issue is related to a lack of protection in the SQL query structure, allowing remote authenticated users to execute arbitrary SQL commands via a crafted URL. This can...

CVE-2015-5023

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2016-3658

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management version 6.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For IBM Curam Social Program Management version 6.1, update to version 6.1.1 to resolve...

CVE-2015-5023: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5049

SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5049: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2016-3665

Name of the Vulnerable Software and Affected Versions IBM OpenPages GRC Platform versions 7.0 through 7.0.0.4 IF3 IBM OpenPages GRC Platform versions 7.1 through 7.1.0.1 IF5 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-7784: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the BOKUBLOCK 1 BbAdminViewsControl213 plugin before 1.1 and 2 BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...