Sql injection

SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL commands via the item parameter...

CVE-2009-5088

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...

CVE-2009-5094

SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL commands via the item parameter...

PT-2011-1018

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4 through 12.1.0.1 Description The issue allows remote authenticated users to affect confidentiality. Multiple vulnerabilities in the current Oracle setup enable remote attackers to bypass security...

PT-2011-1017

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4 through 12.1.0.1 Description The issue affects the confidentiality, integrity, and availability of the system. It allows remote authenticated users to exploit the vulnerability via unknown vectors...

PT-2011-1012

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.2.0.4 Oracle Database Server version 12.1.0.1 Description The issue allows remote authenticated users to affect integrity via unknown vectors. Multiple vulnerabilities in the current Oracle...

PT-2011-1011

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.1.0.7 Oracle Database Server versions 11.2.0.3 through 11.2.0.3 Oracle Database Server versions 12.1.0.1 through 12.1.0.1 Description The issue allows remote attackers to affect availability...

PT-2011-1015

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.2 through 11.2.0.3 Oracle Database Server version 12.1.0.1 Description The issue allows remote authenticated users to affect confidentiality, integrity, and availability. It also enables remote attackers ...

PT-2011-1016

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.2.0.4 through 10.2.0.5 Oracle Database Server versions 11.1.0.7 Oracle Database Server versions 11.2.0.2 through 11.2.0.3 Oracle Database Server version 12.1.0.1 Description The issue affects the...

PT-2011-1010

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.2.0.3 Oracle Database Server version 12.1.0.1 Description The issue allows remote authenticated users to affect availability and potentially bypass security restrictions, execute arbitrary SQ...

CVE-2011-2930

Multiple SQL injection vulnerabilities in the quotetablename method in the ActiveRecord adapters in activerecord/lib/activerecord/connectionadapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a...

CVE-2011-2930

Multiple SQL injection vulnerabilities in the quotetablename method in the ActiveRecord adapters in activerecord/lib/activerecord/connectionadapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a...

CVE-2011-2930

Multiple SQL injection vulnerabilities in the quotetablename method in the ActiveRecord adapters in activerecord/lib/activerecord/connectionadapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a...

CVE-2011-2930

Multiple SQL injection vulnerabilities in the quotetablename method in the ActiveRecord adapters in activerecord/lib/activerecord/connectionadapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a...

CVE-2011-2930

Multiple SQL injection vulnerabilities in the quotetablename method in the ActiveRecord adapters in activerecord/lib/activerecord/connectionadapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a...

CVE-2011-2930

Multiple SQL injection vulnerabilities in the quotetablename method in the ActiveRecord adapters in activerecord/lib/activerecord/connectionadapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a...

CVE-2010-4829

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2010-4830

SQL injection vulnerability in Resumes/TDRESUMEIndlist.asp in Techno Dreams T-Dreams Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the zResidency parameter...

CVE-2010-4826

SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the MNAME parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in Resumes/TDRESUMEIndlist.asp in Techno Dreams T-Dreams Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the zResidency parameter...