WordPress IP Blacklist Cloud Plugin <= 3.4 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

PT-2015-5597

Name of the Vulnerable Software and Affected Versions WordPress Survey and Poll plugin version 1.1.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the survey id parameter in an ajax survey action to the "/wp-admin/admin-ajax.php" A...

Sql injection

SQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php...

Sql injection

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed...

Sql injection

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery contus-video-gallery plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php...

CVE-2015-2070

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed...

CVE-2015-2066

CVE-2015-2066 affects DLGuard 4.5. A SQL injection flaw in index.php via the c parameter allows remote attackers to execute arbitrary SQL commands; exploitation details are provided by CNVD/CVE records, but no patch or mitigation is specified in the supplied documents.

CVE-2015-2066

SQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php...

CVE-2015-1605

Dell ScriptLogic Asset Manager (Quest Workspace Asset Manager) vulnerable before 9.5 due to multiple SQL injection flaws in GetClientPackage.aspx and GetProcessedPackage.aspx. Root cause: insufficient input validation allowing remote SQL injection, enabling remote code execution under the NETWORK...

Sql injection

SQL injection vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote administrators to execute arbitrary SQL commands via the user parameter in the history page to admin.php...

MantisBT 1.1.x < 1.2.18 Multiple Vulnerabilities

Binary data 8902.prm...

Sql injection

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-5391

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLPe versions prior to 9.3.400 Description The issue allows remote authenticated ePO users to execute arbitrary SQL commands. This could potentially lead to unauthorized data access or modification...

CVE-2015-1616: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1434

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...

CVE-2015-1434

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...

CVE-2015-1471

SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI...

Sql injection

SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI...

CVE-2015-1471

SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI...

PT-2015-1024

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS versions prior to 5.5 patch 7 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands via crafted HTTPS requests. This is due to multiple SQL injection...