15258 matches found
CVE-2017-5345
SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI...
PT-2017-16447
Name of the Vulnerable Software and Affected Versions GeniXCMS version 0.0.8 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the id parameter to the "gxadmin/index.php" endpoint. Recommendations For GeniXCMS version 0.0.8,...
PT-2017-16446
Name of the Vulnerable Software and Affected Versions GeniXCMS version 0.0.8 Description The issue allows remote authenticated editors to execute arbitrary SQL commands. This is achieved by exploiting the term parameter in the default URI, specifically in the...
Sql injection
SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch...
CVE-2016-10114
SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch...
Sql injection
SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...
CVE-2016-10096
SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...
PT-2019-5829
Name of the Vulnerable Software and Affected Versions phpIPAM version 1.4 Description The issue is related to a lack of protection against SQL structure manipulation in the app/admin/custom-fields/filter.php component of the phpIPAM web application. This can be exploited by a remote attacker to...
PT-2019-5828
Name of the Vulnerable Software and Affected Versions phpIPAM version 1.4 Description The issue is related to a lack of protection against SQL query structure manipulation in the app/admin/custom-fields/edit-result.php component of the phpIPAM web application. This can be exploited by a remote...
PT-2019-5826
Name of the Vulnerable Software and Affected Versions phpIPAM version 1.4 Description The issue is related to a lack of protection against SQL query structure manipulation in the app/admin/custom-fields/filter-result.php component of the phpIPAM web application. This can be exploited by a remote...
phpMyAdmin SQL Injection Vulnerability (CNVD-2016-13237)
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A SQL injection vulnerability exists in phpMyAdmin. An attacker can exploit this vulnerability to execute arbitrary SQL commands...
Joomla! Component DT Register - 'cat' SQL Injection
Title: SQL injection in Joomla extension DT Register Credit: Elar Lang / https://security.elarlang.eu Vulnerability: SQL injection Vulnerable version: before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 CVE: pending Full Disclosure URL:...
IBM BigFix Remote Control SQL Injection Vulnerability
IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A SQL injection vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary SQL commands...
CVE-2016-2873
SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-2873
SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
PT-2016-5296
Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.3 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 9.1.3, update to version 9.1.3 or later to resolve t...
CVE-2016-2873: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-2950: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
PT-2016-5259
Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.1 before MR2 Patch 13 IBM QRadar SIEM versions 7.2 before 7.2.7 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For IBM QRadar SIEM version 7.1,...