CVE-2017-1002018: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter...

PT-2017-11008

Name of the Vulnerable Software and Affected Versions wordpress plugin eventr version 1.02.2 Description The issue arises from insufficient input sanitization in the edit.php form and event form.php code, allowing for blind SQL injection attacks via the event parameter. Recommendations For versio...

PT-2017-11007

Name of the Vulnerable Software and Affected Versions wordpress plugin eventr version 1.02.2 Description The issue concerns a lack of input sanitization in the edit.php form and attendees.php code, allowing for blind SQL injection via the event parameter. Recommendations For version 1.02.2, updat...

CVE-2017-1002019: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...

CVE-2008-6116: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the EXtrovert Software Thyme comthyme 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php...

CVE-2005-1084: Undefined Security Weakness

SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter...

CVE-2002-0962

Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via 1 the url variable in the Link field of a calendar event, 2 the topic parameter in index.php, or 3 the title parameter in comment.php...