PT-2015-4835

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 11.00.98000.225 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Unified Communications Manager version 11.00.98000.225, update to...

CVE-2015-0715: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608...

CVE-2015-1397

SQL injection vulnerability in the getCsvFile function in the MageAdminhtmlBlockWidgetGrid class in Magento Community Edition CE 1.9.1.0 and Enterprise Edition EE 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularityfieldexpr parameter when the popularityfrom ...

CVE-2015-3345

SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows remote administrators to execute arbitrary SQL commands via unspecified vectors, related to the "phpList database."...

Sql injection

SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows remote administrators to execute arbitrary SQL commands via unspecified vectors, related to the "phpList database."...

Sql injection

SQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-3346

SQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-3346: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6166

Name of the Vulnerable Software and Affected Versions Drupal PHPlist Integration Module versions prior to 6.x-1.7 Description The issue allows remote administrators to execute arbitrary SQL commands, related to the "phpList database." Recommendations For versions prior to 6.x-1.7, update to versi...

F5 FirePass SQL injection vulnerability CVE-2012-1777

F5 FirePass is prone to an SQL injection vulnerability. Copyright C 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Sql injection

SQL injection vulnerability in the Interactive Voice Response IVR component in Cisco Unified Communications Manager UCM 10.51.98991.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563...

CVE-2015-0699: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Interactive Voice Response IVR component in Cisco Unified Communications Manager UCM 10.51.98991.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563...

PT-2015-4821

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager UCM version 10.51.98991.13 Description A SQL injection issue in the Interactive Voice Response IVR component allows remote attackers to execute arbitrary SQL commands. Recommendations For Cisco Unified...

Sql injection

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

CVE-2014-9145

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

CVE-2014-9145

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

Sql injection

Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitrary SQL commands via a 1 hits parameter in a samhits action to sam-ajax.php; the 2 cstr parameter in a loadposts action to sam-ajax-admin.php; the 3 searchTe...

Sql injection

SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq52515...

PT-2015-4807

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager version 8.14 Description A SQL injection issue in the Image Management component allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Unified Communications...

CVE-2015-0684: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq52515...