15265 matches found
GLPI 0.83.8 SQL Injection Vulnerability
GLPI version 0.83.8 suffers from multiple error-based SQL injection vulnerabilities. Input passed via the POST parameter 'usersidassign' in '/ajax/ticketassigninformation.php' script, POST parameter 'filename' in '/front/document.form.php' script, and POST parameter 'table' in...
PT-2013-5113
Name of the Vulnerable Software and Affected Versions TYPO3 extension rzautocomplete versions prior to 0.0.9 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 0.0.9, update to version 0.0.9 or later to...
CVE-2013-3957
SQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
易思espcms某处sql注入漏洞，附详细分析与POC代码
简要描述： 小菜刚学代码审核 详细说明： 文件 /interface/forummain.php中$userid未过滤进入sql语句 第17行到32行 function inlist parent::startpagetemplate; parent::memberpurview0, $this-mlink'orderlist'; includeonce adminROOT . 'public/classpagebotton.php'; $lng = adminLNG == 'big5' ? $this-CON'islancode' : adminLNG; $page =...
PT-2013-1047
Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 Update 1 Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This is related to a SQL injection vulnerability in the login screen of the Web Navigator in...
Fobuc Guestbook 0.9 SQL Injection
Exploit Title : Fobuc Guestbook 0.9 SQL Injection Date : 11 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://sourceforge.net/projects/fobuc/ Software Link : http://jaist.dl.sourceforge.net/project/fobuc/0.9/Release/FOBUC0.9.zip Version : 0.9 Tested on :...
CVE-2013-3721
SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to execute arbitrary SQL commands via the d parameter...
CVE-2013-3721
SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to execute arbitrary SQL commands via the d parameter...
CVE-2013-2956
SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-2956
SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2013-4061
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Data Growth for Oracle E-Business Suite versions 6.x through 9.x before 9.1.0.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 6.x through 9.x before 9.1.0.3,...
CVE-2013-2956: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-6560
SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter...
Sql injection
SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter...
CVE-2012-6560
SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter...
Server: Multiple SQL injection
ownCloud before 5.0.6 does not neutralize special elements that are passed to the SQL query in lib/db.php which therefore allows an authenticated attacker to execute arbitrary SQL commands. CVE-2013-2045 ownCloud before 5.0.6 and 4.5.11 does not neutralize special elements that are passed to the...
WHMCS <= 4.5.2 SQLi Vulnerability
WHMCS is prone to an SQL injection SQLi vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...