CVE-2015-4613

SQL injection vulnerability in the backend module in the Developer Log devlog extension before 2.11.4 for TYPO3 allows remote editors to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4611

SQL injection vulnerability in the Smoelenboek ncgovsmoelenboek extension before 1.0.9 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4609

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4611

SQL injection vulnerability in the Smoelenboek ncgovsmoelenboek extension before 1.0.9 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6637

Name of the Vulnerable Software and Affected Versions TYPO3 Store Locator locator extension versions prior to 3.3.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 3.3.1, update to version 3.3.1 or later to resolve t...

CVE-2015-4610: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Store Locator locator extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6636

Name of the Vulnerable Software and Affected Versions TYPO3 wt directory extension versions prior to 1.4.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue...

PT-2015-6640

Name of the Vulnerable Software and Affected Versions TYPO3 Developer Log devlog extension versions prior to 2.11.4 Description A SQL injection issue in the backend module of the Developer Log devlog extension for TYPO3 allows remote editors to execute arbitrary SQL commands. Recommendations For...

PT-2015-6638

Name of the Vulnerable Software and Affected Versions TYPO3 extension ncgov smoelenboek versions prior to 1.0.9 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 1.0.9, update to version 1.0.9 or later to resolve the...

CVE-2015-4609: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4348

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4348

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6530

Name of the Vulnerable Software and Affected Versions Drupal Spider Contacts module affected versions not specified Description A SQL injection issue in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to...

CVE-2015-2956

SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2956

MilkyStep by Igreks MilkyStep Light v0.94 and earlier and MilkyStep Professional v1.82 and earlier contain a SQL injection (CWE-89) vulnerability that enables remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected products include MilkyStep Light Ver0.94 and earlier ...

CVE-2015-2956: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6004

Name of the Vulnerable Software and Affected Versions Igreks MilkyStep Light versions 0.94 and earlier Igreks MilkyStep Professional versions 1.82 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Igreks MilkyStep Light versions 0.94...

CVE-2015-4109

Multiple SQL injection vulnerabilities in the ratings module in the Users Ultra plugin before 1.5.16 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 datatarget or 2 datavote parameter in a ratingvote wpajaxnoprivratingvote action to wp-admin/admin-ajax.php...