8603 matches found
security flaw
Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting XSS, and HTTP response splitting...
PT-2006-6735 · Baal · Baalasp Forum
Name of the Vulnerable Software and Affected Versions: BaalAsp forum affected versions not specified Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The vulnerabilities can be exploited through...
PT-2006-6611 · Funkyasp · Funkyasp Glossary
Name of the Vulnerable Software and Affected Versions: FunkyASP Glossary version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the alpha parameter in the demo/glossary/glossary.asp file. Recommendations: For FunkyASP Glossary...
PT-2006-6446 · Unknown · Article Script
Name of the Vulnerable Software and Affected Versions: Article Script versions 1.6.3 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the category parameter in the rss.php file. Recommendations: For Article Script versions 1.6.3 an...
PT-2006-3745 · X Cart · X-Cart
Name of the Vulnerable Software and Affected Versions: X-Cart Gold and Pro versions 4.0.18 through 4.1.0 beta 1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field in search.php, when the settings specify only "Search in Detailed...
PT-2005-5169 · Quantum Art · Quantum Art Qp7.Enterprise
Name of the Vulnerable Software and Affected Versions: Quantum Art QP7.Enterprise affected versions not specified Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p news id parameter to API endpoints such as "news and events...
PT-2005-4293 · Php · Php Handicapper
Name of the Vulnerable Software and Affected Versions: PHP Handicapper affected versions not specified Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the serviceid parameter in the process signup.php file. The vendor initially disputed this issue,...
PT-2005-2772 · Os4E · Unknown Product
Name of the Vulnerable Software and Affected Versions: Unknown product by Online Solutions for Educators OS4E affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the password variable in the login.asp file. This could potentially le...
PT-2005-2722 · Ezdwc · Ezdwc Newsletterez
Name of the Vulnerable Software and Affected Versions: ezdwc NewsletterEz version 3.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the password parameter in the "login.asp" file. Recommendations: For ezdwc NewsletterEz version 3.0, conside...
PT-2005-2567 · Quick.Cart · Quick.Cart
Name of the Vulnerable Software and Affected Versions: Quick.cart version 0.3.0 Description: The issue concerns a potential SQL injection vulnerability in the index.php file of Quick.cart, allegedly allowing remote attackers to execute arbitrary SQL commands via the iCategory parameter. However,...
PT-2005-1332 · Biborb · Biborb
Name of the Vulnerable Software and Affected Versions: BibORB versions 1.3.2 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the Username or Password variables. Recommendations: For BibORB versions 1.3.2 and earlier, update to...
SQL Server 2017 RTM Cumulative Update (CU) 10 KB4342123
SQL Server 2017 RTM Cumulative Update CU 10 KB4342123...
SQL Server 2016 RTM Cumulative Update (CU) 1 KB3164674
SQL Server 2016 RTM Cumulative Update CU 1 KB3164674...
SQL Server 2022 RTM Cumulative Update (CU) 4 KB5026717
SQL Server 2022 RTM Cumulative Update CU 4 KB5026717...
SQL Server 2017 RTM Cumulative Update (CU) 14 KB4484710
SQL Server 2017 RTM Cumulative Update CU 14 KB4484710...
Security Update for SQL Server 2025 RTM CU (KB5089899)
Security Update for SQL Server 2025 RTM CU KB5089899...
KB5004524 - Cumulative Update 12 for SQL Server 2019
None None...
KB5005226 - Cumulative Update 26 for SQL Server 2017
None None...