CVE-2007-0347

The iseow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" quote character, which allows remote authenticated users to execute limited SQL injection attacks and cause a denial of service database error via a ' character in certain messages, tickets, or Wiki entries...

CVE-2006-6282

members.php in Vikingboard 0.1.2 allows remote attackers to trigger a forced SQL error via an invalid s parameter, a different vector than CVE-2006-4709. NOTE: might only be an exposure if displayerrors is enabled, but due to lack of details, even this is not clear...

GLSA-200611-11 : TikiWiki: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200611-11 TikiWiki: Multiple vulnerabilities In numerous files TikiWiki provides an empty sortmode parameter, causing TikiWiki to display additional information, including database authentication credentials, in certain error...

DEBIAN-CVE-2005-4744

Off-by-one error in the sqlerror function in sqlunixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single...

SQL IN PortailPHP

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: yes Credit: ABDUCTER --- [email protected] OR [email protected] Vulnerable: PortailPHP 2.4 and all version info :- PortailPHP POWERFUL FORUM AND formal site http://www.portailphp.com/ there is sql in index.php...

Update Rollup 1 for System Center Data Protection Manager 2010 (KB2250444)

This hotfix rollup resolves the following issues: You cannot protect the Microsoft Exchange Database Availability Group DAG on a secondary DPM 2010 server. You are prompted to restart a client computer after you install an agent on the client. DPM services crash, and you receive the error, "Unabl...