CVE-2014-8999

SQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows remote authenticated users to execute arbitrary SQL commands via the selgroups parameter...

Sql injection

SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie...

Sql injection

Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL commands via the 1 country, 2 gender1, or 3 gender2 parameter in a search action to index.php...

CVE-2014-8995: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie...

CVE-2014-9005: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL commands via the 1 country, 2 gender1, or 3 gender2 parameter in a search action to index.php...

CVE-2014-8596

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the 1 submitid parameter in a 2 action to files/administration/submissions.php or 2 status parameter to files/administration/members.php...

CVE-2014-8499

Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro PMP and Password Manager Pro Managed Service Providers MSP edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCHALL parameter to 1 SQLAdvancedALSearchResult.cc or ...

Sql injection

Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro PMP and Password Manager Pro Managed Service Providers MSP edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCHALL parameter to 1 SQLAdvancedALSearchResult.cc or ...

Sql injection

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the 1 submitid parameter in a 2 action to files/administration/submissions.php or 2 status parameter to files/administration/members.php...

Sql injection

SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro PMP and Password Manager Pro Managed Service Providers MSP edition before 7.1 build 7105 allows remote authenticated users to execute arbitrary SQL commands via the SEARCHALL parameter...

PT-2014-8562

Name of the Vulnerable Software and Affected Versions ManageEngine Password Manager Pro versions prior to 7.1 build 7105 ManageEngine Password Manager Pro Managed Service Providers edition versions prior to 7.1 build 7105 Description The issue allows remote authenticated users to execute arbitrar...

Joomla Component jeeventcalendar SQL Injection (CVE-2010-2513)

An SQL injection vulnerability has been reported in Joomla Jeeventcalendar. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_Jobline SQL Injection (CVE-2009-2554)

An SQL injection vulnerability has been reported in Joomla Com Jobline. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_techfolio SQL Injection (CVE-2011-5113)

An SQL injection vulnerability has been reported in Joomla Com Techfolio. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-8554

SQL injection vulnerability in the mcprojectgetattachments function in api/soap/mcprojectapi.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary SQL commands via the projectid parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1609...

CVE-2014-8554

SQL injection vulnerability in the mcprojectgetattachments function in api/soap/mcprojectapi.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary SQL commands via the projectid parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1609...

Joomla Component com_jotloader SQL Injection (CVE-2008-2564; CVE-2010-4617)

An SQL injection vulnerability has been reported in Kanich Com Jotloader. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_jsjobs SQL Injection (CVE-2009-4599)

An SQL injection vulnerability has been reported in Joomshark Com Jsjobs. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_productbook SQL Injection (CVE-2010-1045)

An SQL injection vulnerability has been reported in Design-cars Com Productbook. An attacker could exploit this vulnerability via the id parameter in a detail action to index.php. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the...

XOOPS module Articles SQL Injection (CVE-2007-3311)

An SQL injection vulnerability has been reported in Xoops Articles Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...