CVE-2015-1560

SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon formerly Merethis Centreon 2.5.4 and earlier fixed in Centreon web 2.7.0 allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php...

CVE-2015-1560: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon formerly Merethis Centreon 2.5.4 and earlier fixed in Centreon web 2.7.0 allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php...

PT-2015-5349

Name of the Vulnerable Software and Affected Versions Centreon versions prior to 2.7.0 Description A SQL injection issue exists in the isUserAdmin function, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the sid parameter in the...

CVE-2015-5452

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3...

CVE-2015-5452

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3...

PT-2015-6919

Name of the Vulnerable Software and Affected Versions Watchguard XCS versions 9.2 through 10.0 before build 150522 Description The issue allows remote attackers to execute arbitrary SQL commands via the sid cookie. This can be achieved by sending a request to the "borderpost/imp/compose.php3"...

CVE-2015-5452: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3...

[SECURITY] [DSA 3297-1] unattended-upgrades security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3297-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini June 29, 2015 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3297-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LimeSurvey SQL Injection Vulnerability (CNVD-2015-03914)

LimeSurvey formerly known as PHPSurveyor is a set of open source online questionnaire program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution and data collection. A SQL injection vulnerability exists in the...

[SECURITY] [DSA 3291-1] drupal7 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3291-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 18, 2015 https://www.debian.org/security/faq -...

Sql injection

SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter...

CVE-2015-4628

SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter...

CVE-2015-4628

SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter...

PT-2015-6644

Name of the Vulnerable Software and Affected Versions LimeSurvey versions prior to 2.06+ Build 150618 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the sid parameter in the application/controllers/admin/questiongroups.php...

CVE-2015-4628: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter...

DSA-3291-1 drupal7 - security update

Bulletin has no description...

DSA-3269-1 postgresql-9.1 - security update

Bulletin has no description...

DSA-3265-1 zendframework - security update

Bulletin has no description...

[SECURITY] [DSA 3260-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3260-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 13, 2015 http://www.debian.org/security/faq -...