CVE-2013-5311

CVE-2013-5311: Affected software is Vastal I-Tech phpVID 1.2.3. The vulnerability is SQL injection via the n parameter in browse_videos.php and members.php (cat parameter noted as covered by CVE-2008-4157). Impact is remote SQL command execution as described in the public records. Connected docum...

CVE-2013-5304

SQL injection vulnerability in the Store Locator locator extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Browser - TYPO3 without PHP browser extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Store Locator locator extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5466

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 4.5.5 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 4.5.5, update to version 4.5.5 or later to resolve the issue...

PT-2013-5470

Name of the Vulnerable Software and Affected Versions TYPO3 DB Integration wfqbe extension versions prior to 2.0.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve...

PT-2013-5462

Name of the Vulnerable Software and Affected Versions TYPO3 ke search extension versions prior to 1.4.1 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issue...

PT-2013-5464

Name of the Vulnerable Software and Affected Versions TYPO3 Store Locator locator extension versions prior to 3.1.5 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 3.1.5, update to version 3.1.5 or later to resolve the issue...

CVE-2013-5310: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DB Integration wfqbe extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5306: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Browser - TYPO3 without PHP browser extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in PHPFox before 3.6.0 build4 allows remote attackers to execute arbitrary SQL commands via the searchgender parameter to user/browse/view/...

Sql injection

SQL injection vulnerability in PHPFox before 3.6.0 build6 allows remote attackers to execute arbitrary SQL commands via the searchsortby parameter to user/browse/view/...

Sql injection

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php...

CVE-2013-4879

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php...

CVE-2013-4879: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php...

CVE-2013-4619

Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 start or 2 end parameter to interface/reports/customreportrange.php, or the 3 formnewid parameter to custom/charttracker.php...

Sql injection

Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 start or 2 end parameter to interface/reports/customreportrange.php, or the 3 formnewid parameter to custom/charttracker.php...

Sql injection

SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via the "c" parameter to index.php...

CVE-2013-4619

Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 start or 2 end parameter to interface/reports/customreportrange.php, or the 3 formnewid parameter to custom/charttracker.php...

Sql injection

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors...