Watchguard XCS Arbitrary Command Execution Vulnerability

Watchguard XCS is an all-in-one solution for protection against spam, viruses, corrupted websites, blended threats and cyber-attacks from WatchGuard USA. A security vulnerability exists in Watchguard XCS version 9.2 and build 150522 prior to version 10.0, which stems from the failure of the...

SQL Injection Vulnerability in the ClassID Parameter of Guozidian's Asset Management Information System for Administrative Utilities

The Administrative Utility Asset Management Information System is an asset management information system, in order to standardize and strengthen the management of state-owned asset management information system of administrative institutions, and to improve the level of informationization of...

CVE-2015-5453

Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl...

SQL Injection Vulnerability in the id Parameter of a Government System Developed by Beijing Xiangyu Leader Software Co.

Ltd. is a high-tech enterprise dedicated to the research and development of office software for e-government applications and market development. A SQL injection vulnerability exists in the id parameter of the government system developed by Beijing Xiangyu Leader Software Co., Ltd. which allows...

PT-2015-6920

Name of the Vulnerable Software and Affected Versions Watchguard XCS versions 9.2 through 10.0 before build 150522 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by using shell metacharacters in the id parameter to the "ADMIN/mailqueue.spl"...

CVE-2015-5453: Improper Neutralization of Special Elements used in a Command

Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl...

WatchGuard XCS 'id' OS Injection Vulnerability

WatchGuard XCS is an antivirus and email management security appliance. The WatchGuard XCS WEB interface 'mailqueue.spl' fails to properly handle the 'id' parameter, allowing remote attackers to exploit the vulnerability by submitting a special request to execute arbitrary system commands with...

SQL Injection Vulnerability in OAID Parameter of Haitian OA System/Documents/OA_WordDocDisplay.asp Page

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

SQL Injection Vulnerability in Haitian OA System ID Parameter

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

Persian Car CMS SQL Injection Vulnerability

Persian Car CMS is a content management system. Persian Car CMS fails to properly handle the 'catid' parameter in URLs, allowing remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

PT-2015-6669

Name of the Vulnerable Software and Affected Versions Persian Car CMS version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cat id parameter to the default URI, which is vulnerable to SQL injection. Recommendations For Persian Car CM...

Sql injection

SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent...

PT-2015-6654

Name of the Vulnerable Software and Affected Versions Joomla! EQ Event Calendar component affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the id parameter to "eqfullevent". Recommendations At the moment, there is no...

PT-2015-6660

Name of the Vulnerable Software and Affected Versions Enhanced SQL Portal version 5.0.7961 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to "iframe.php" API endpoint. Recommendations For version 5.0.7961, avoid usi...

CVE-2015-4654: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent...

CVE-2015-4660: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Enhanced SQL Portal 5.0.7961 allows remote attackers to inject arbitrary web script or HTML via the id parameter to iframe.php...

Sql injection

SQL injection vulnerability in mod1/index.php in the Akronymmanager sbakronymmanager extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter...

PT-2015-5899

Name of the Vulnerable Software and Affected Versions Akronymmanager sb akronymmanager extension versions prior to 7.0.0 for TYPO3 Description The issue allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands. This is achieved via the id parameter ...

CVE-2015-2803: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mod1/index.php in the Akronymmanager sbakronymmanager extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/Parmset/sms_mb_edit.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...