PT-2015-7194

Name of the Vulnerable Software and Affected Versions Cisco Prime Service Catalog version 11.0 Description A SQL injection issue in the web framework of Cisco Prime Service Catalog allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Prime Service Catalog...

CVE-2015-7297

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858...

CVE-2015-7297

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858...

CVE-2015-7858

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7297...

CVE-2015-7297

Joomla! versions 3.2 through 3.4.4 are vulnerable to a SQL injection vulnerability in the core Content History administrator component. The flaw exists in the dynamic SQL query generation, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Successful exploitation...

CVE-2015-5668

SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5668

SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-7026

Name of the Vulnerable Software and Affected Versions Techno Project Japan Enisys Gw versions prior to 1.4.1 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issue...

CVE-2015-7858: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7297...

CVE-2015-7297: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858...

CVE-2015-5668: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-7511

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.2 through 3.4.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Joomla! versions 3.2 through 3.4.4, update to version 3.4.4 or later to resolve the issue...

PT-2015-7648

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.2 through 3.4.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 3.2 through 3.4.4, update to version 3.4.4 or later to resolve the issue...

CVE-2015-7903

SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-6486

SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-7903

SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-2586

Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions before B FRN 15.000 Micrologix 1400 versions before B FRN 15.003 Description The issue is related to a lack of protection against SQL query structure attacks. Exploitation of this issue may allow a remote attacker to...

CVE-2015-6486: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-7903: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

ManageEngine Applications Manager CommonAPIUtil moveSubGroup haid tohaid SQL Injection

An SQL injection vulnerability exists in ManageEngine Applications Manager. This vulnerability is due to insufficient validation of the haid and tohaid parameters when processing requests using the moveSubGroup method of the CommonAPIUtil class. By sending crafted request messages, a remote...