CVE-2013-4870

SQL injection vulnerability in the News Search newssearch extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-3404

Cisco CUCM (7.1.x–9.1(1a)) is affected by a remote SQL injection vulnerability that allows an unauthenticated attacker to run arbitrary SQL via unspecified vectors and, via metadata, potentially reconstruct encrypted credentials. Exploitation can enable credential discovery and, in combination wi...

CVE-2013-3412

Cisco Unified Communications Manager (CUCM) is affected by a blind SQL injection vulnerability (CVE-2013-3412) in versions 7.1(x) through 9.1(2). The issue allows an authenticated, remote attacker to execute arbitrary SQL commands via unspecified vectors, potentially impacting confidentiality, in...

PT-2013-4369

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 7.1x through 9.12 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions 7.1x through 9.12, update to a version that...

CVE-2013-3404

SQL injection vulnerability in Cisco Unified Communications Manager CUCM 7.1x through 9.11a allows remote attackers to execute arbitrary SQL commands via unspecified vectors, leading to discovery of encrypted credentials by leveraging metadata, aka Bug ID CSCuh01051...

PT-2013-4361

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 7.1x through 9.11a Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands, potentially leading to the discovery of encrypted credentials by leveraging metadata...

CVE-2013-3578

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...

Sql injection

SQL injection vulnerability in the management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2013-3276

Name of the Vulnerable Software and Affected Versions Symantec Security Information Manager appliance versions 4.7.x through 4.8.x Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions 4.7.x through 4.8.x, update to version 4.8.1 o...

CVE-2013-0560

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766...

CVE-2012-5766

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors involving the RNVisibility page and unspecified screens, a different vulnerability than...

CVE-2013-0560: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766...

PT-2013-2427

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.1 through 5.2 IBM Sterling File Gateway versions 2.1 through 2.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Recommendations For IBM...

CVE-2013-4748

SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-6144: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4748: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5172

Name of the Vulnerable Software and Affected Versions TYPO3 myquizpoll extension versions prior to 2.0.6 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.0.6, update to version 2.0.6 or later to resolve the issue...

PT-2013-5175

Name of the Vulnerable Software and Affected Versions TYPO3 News system news extension versions prior to 1.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue...

CVE-2012-6577

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors...