Joomla JE auction component SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE auction component. An attacker can exploit the vulnerability to access or modify database data...

Joomla JE Video Rat Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE Video Rat component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Vik Booking Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Vik Booking component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Hbooking Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Hbooking component. An attacker can exploit the vulnerability to access or modify database data...

Itech B2B Script SQL Injection Vulnerability (CNVD-2017-01850)

B2B Script v4.29 is a versatile WEB solution for those who want to quickly publish their B2B portals in minutes. A SQL injection vulnerability exists in the 'token' in the catcompany.php page in B2B Script v4.29, which can be exploited by an attacker to obtain sensitive information from the...

CVE-2016-8566

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database...

CVE-2016-8567

An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP...

Format string

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database...

CVE-2016-8566

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database...

Vik Booking Component SQL Injection Vulnerability in Joomla!

Joomla! is a globally recognized content management system. vik Booking is a functional plugin based on Joomla! A SQL injection vulnerability exists in the Vik Booking component of Joomla! that can be exploited by attackers to access or modify database data...

CVE-2016-8954

IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database...

Zoneminder 1.29/1.30 - Cross-Site Scripting / SQL Injection / Session Fixation / Cross-Site Request Forgery

Source: https://www.foxmole.com/advisories/foxmole-2016-07-05.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 === FOXMOLE - Security Advisory 2016-07-05 === Zoneminder multiple vulnerabilities Affected Versions ================= Zoneminder 1.29,1.30 Issue Overview ============== Vulnerability...

CVE-2017-5218

A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3. The APDocumentUI.asp web resource includes Utilityfuncs.js when the file is opened or viewed. This file crafts a SQL statement to identify the database that is to be in use with the current user's session. The database variable c...

CVE-2016-8930

IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

Itech Auction Script 6.49 - mcid SQL Injection

Itech Auction Script 6.49 - mcid SQL Injection Exploit Title: Itech Auction Script v6.49 – SQL Injection Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/auction-script/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website:...

Multiple TIBCO Product SQL Injection Vulnerabilities

TIBCO Spotfire Server and others are products of TIBCO Software, Inc. Multiple TIBCO products are vulnerable to a SQL injection vulnerability that originates from a program's failure to properly validate user-supplied input before using it in a SQL query. The vulnerability allows an attacker to...

Moodle MSA-17-0001 Remote File Inclusion Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. Moodle suffers from a remote file inclusion vulnerability. An attacker can exploit thi...

Code injection

Ubiquiti Networks UniFi 5.2.7 does not restrict access to the database, which allows remote attackers to modify the database by directly connecting to it...

CVE-2016-7792

CVE-2016-7792 affects Ubiquiti Networks UniFi 5.2.7. The issue is improper access control allowing remote attackers to connect directly to the device’s database and modify it. The vulnerability is scoped to the UniFi AP AC Lite/5.2.7 context in the provided documents; no vendor patch or mitigatio...

LocalTapiola: Multiple Vulnerabilities in Oracle Webcenter Sites (/cs/Satellite)

Issue The reporter found issues related to previous reports: 167453, 170532, 173563 and 176574. It was found to be possible to circumvent some of the protections that have been put in place earlier on to prevent access to protected resources within the Oracle Webcenter Sites application. The...