15263 matches found
CVE-2014-8668
SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-8668: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2014-8670
Name of the Vulnerable Software and Affected Versions SAP Environment, Health, and Safety Management affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations At...
PT-2014-8674
Name of the Vulnerable Software and Affected Versions SAP Contract Accounting affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version that contains a f...
CVE-2014-8664: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Product Safety EHS-SAF component in SAP Environment, Health, and Safety Management allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-8663: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-8588
SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-7176
SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...
CVE-2014-8586
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...
Sql injection
SQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ch parameter...
Sql injection
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...
Sql injection
SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 columnfilter or 2 category parameter to system/index.php or the 3 tblsort0 parameter in the comment module to system/index.php...
Sql injection
SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...
CVE-2014-7176
SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...
CVE-2014-8588
CVE-2014-8588 describes a SQL injection in SAP HANA metadata.xsjs (vulnerable in SAP HANA 1.00.60.379371). Remote attackers could execute arbitrary SQL commands via unspecified vectors. The NVD entry and multiple feeds confirm this CVE ID and vulnerability class; affected software is SAP HANA, co...
PT-2014-6444
Name of the Vulnerable Software and Affected Versions EllisLab ExpressionEngine versions prior to 2.9.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the column filter or category parameter to "system/index.php" or the tbl sort...
PT-2014-8635
Name of the Vulnerable Software and Affected Versions SAP HANA version 1.00.60.379371 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. Recommendations For SAP HANA version 1.00.60.379371, at the moment, there is no information about a newer...
CVE-2014-3366
SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted response, aka Bug ID CSCup88089...