Joomla Sponsor Wall Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. SQL injection vulnerability in Joomla Sponsor Wall component. An attacker can exploit the vulnerability to access or modify database data...

Joomla onisQuotes Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla onisQuotes component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Vik Booking Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Vik Booking component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Hbooking Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Hbooking component. An attacker can exploit the vulnerability to access or modify database data...

Joomla JE Video Rat Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE Video Rat component. An attacker can exploit the vulnerability to access or modify database data...

VirtualBox: Multiple vulnerabilities

Background VirtualBox is a powerful virtualization product from Oracle. Description Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details. Impact An attacker could cause a Denial of Service condition. Additionally, an attacker...

Soccer Bet Component 'cat' Parameter SQL Injection Vulnerability in Joomla!

Joomla! is a globally recognized content management system. Soccer Bet is a functional plugin based on Joomla! A SQL injection vulnerability exists in the 'cat' parameter of the Soccer Bet component of Joomla! that can be exploited by attackers to access or modify database data...

SageCRM SQL Injection Vulnerability

SageCRM is a customer relationship management system CRM. SageCRM suffers from a SQL injection vulnerability, which is exploited by attackers to access or modify data or exploit potential vulnerabilities in the underlying database because the program fails to adequately filter user-supplied input...

Multiple SQL Injection Vulnerabilities in Trend Micro Control Manager (CNVD-2017-01598)

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. Trend Micro Control Manager suffers from multiple SQL injection vulnerabilities that stem from a failure to adequately validate SQL queries before using user input. ...

Multiple SQL Injection Vulnerabilities in Ecava IntegraXor

Ecava IntegraXor is a set of Web-based tools for creating and running HMI interfaces for SCADA systems. Ecava IntegraXor suffers from multiple SQL injection vulnerabilities that stem from a failure to properly validate a SQL query before using user input. An attacker could use this vulnerability ...

The vulnerability of the Java Mission Control component of the Java Platform allows a perpetrator to modify data.

The vulnerability of the Java Mission Control component of the Java Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using network packets...

The vulnerability of the Oracle Sun operating system, which allows a hacker to modify data

The vulnerability of the Oracle Sun operating system’s kernel is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to modify, add, or delete data using network packets...

The vulnerability of the Oracle VM VirtualBox virtual machine allows a hacker to gain access to data reading, modify data, or cause a partial service failure.

The vulnerability of the GUI component of the Oracle VM VirtualBox lies in security configuration errors. Exploiting this vulnerability allows a malicious actor to gain read access to data, modify, add, or delete data, or cause partial service failure through HTTP requests...

EMC Documentum D2 DQL Injection Vulnerability

EMC Documentum D2 is an enterprise-class content management system from EMC. The system manages the entire information lifecycle through creation, modification, tracking and other functions, and it includes a number of extensions, such as Documentum Web Publisher Web Content Management, Documentu...

Design/Logic Flaw

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...

CVE-2016-9873

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...

CVE-2016-9873

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...

CVE-2016-5939

IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

Advantech WebAccess 'updateTemplate.aspx' SQL Injection and Authentication Bypass Vulnerabilities

Advantech WebAccess is prone to an SQL injection SQLi vulnerability and an authentication-bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2017-3443

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acce...