15263 matches found
Sql injection
SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter to register/...
Sql injection
SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php...
CVE-2015-1372
SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php...
CVE-2015-1367
SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter...
PT-2015-5242
Name of the Vulnerable Software and Affected Versions CatBot version 0.4.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the lastcatbot parameter in the "index.php" endpoint. Recommendations For CatBot version 0.4.2, consider restricting...
PT-2015-5247
Name of the Vulnerable Software and Affected Versions ferretCMS version 1.0.4-alpha Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the p parameter in an update action to the "admin.php" endpoint. Recommendations For...
SAP Adaptive Server Enterprise SQL Injection Vulnerability
SAP Adaptive Server Enterprise Sybase ASE is a relational database management system from SAP. The system can be used in data-intensive environments and is characterized by high speed and stable performance. An SQL injection vulnerability exists in SAP ASE. A remote attacker can exploit this...
CVE-2014-9573
SQL injection vulnerability in manageuserpage.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote administrators with FILE privileges to execute arbitrary SQL commands via the MANTISMANAGEUSERSCOOKIE cookie...
PT-2015-4283
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.19 MantisBT versions 1.3.x prior to 1.3.0-beta.2 Description The issue allows remote administrators with FILE privileges to execute arbitrary SQL commands. This is achieved via the MANTIS MANAGE USERS COOKIE cook...
Sql injection
SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2015-1310
SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2015-1310: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
PT-2015-5202
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise Sybase ASE affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The estimated number of potentially affected devices and details about...
Sql injection
SQL injection vulnerability in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request...
MyBB 1.8.x < 1.8.2 Multiple Vulnerabilities
Binary data 8618.prm...
Sql injection
SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine CFME 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter...
CVE-2014-9560
SQL injection vulnerability in redirlastpostlist.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter...
Sql injection
SQL injection vulnerability in redirlastpostlist.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter...