PT-2017-13636

Name of the Vulnerable Software and Affected Versions Cash Back Comparison Script version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the PATH INFO to the "search/" endpoint. Recommendations For version 1.0, consider restricting access...

Sql injection

SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an addedittheme task in the wpdevartgallerythemes page to wp-admin/admin.php...

Base Monitor SQL Injection

The vulnerability of the Base Monitor component of the web system, which is designed for monitoring the performance of SQL servers, relates to the lack of protection for SQL query structures. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access and execute arbitra...

New Relic .NET Agent SQL Injection Vulnerability

New Relic .NET Agent is a . A SQL injection vulnerability exists in New Relic .NET Agent versions prior to 6.3.123.0. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

WordPress wordpress-gallery-transformation SQL Injection Vulnerability

WordPress wordpress-gallery-transformation is a website wallpaper plugin for WordPress. WordPress wordpress-gallery-transformation version 1.0 in . /wordpress-gallery-transformation/gallery.php in version 1.0 contains a SQL injection vulnerability that stems from the program failing to filter the...

WordPress rk-responsive-contact-form SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. rk-responsive-contact-form is one of the responsive contact form plugin. A SQL injection vulnerability exists in...

WordPress surveys 'survey_id' variable SQL injection vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress surveys is a polls plugin developed by Binny VA, an Indian software developer for Wordpress. A SQL injection...

Sql injection

Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the 1 checkdownload and possibly 2 checkfilename function in upload/admin2/model/products/modeladmindownload.php or remote authenticated users wit...

CVE-2015-9226

Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the 1 checkdownload and possibly 2 checkfilename function in upload/admin2/model/products/modeladmindownload.php or remote authenticated users wit...

CVE-2017-14238

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

Sql injection

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

CVE-2017-14242

SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

CVE-2017-14238

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

CVE-2017-14242

SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

CVE-2017-14238

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

CVE-2017-14238

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

CVE-2017-14242

SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

PT-2017-7285

Name of the Vulnerable Software and Affected Versions Drupal User Dashboard module versions prior to 7.x-1.4 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 7.x-1.4, update to version 7.x-1.4 or later to resolve the issue...

CVE-2015-7877: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to label.php; or 2 type parameter to synotheme.php...