PT-2016-7609

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sort parameter in the categoriesServlet servlet. Recommendations For versions prior to 3.3.1, update to...

weaver 0A系统在com.eweaver.base.DataAction处存在任意SQL命令执行漏洞

No description provided by source...

Mango Automation Multiple Vulnerabilities

Mango Automation is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2015-7418

Name of the Vulnerable Software and Affected Versions JSP/MySQL Administrador Web version 1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that execute arbitrary SQL commands. This is achieved via the cmd parameter to the...

JSPMySQL Administrador CSRF & XSS Vulnerabilities

JSPMySQL Administrador，通过基于jsp技术的B/S模式来远程管理MySQL数据库。下载链接：https://sites.google.com/site/mfpledon/producao-de-software影响版本：JSPMySQL Administrador V.1漏洞类型：CSRF、XSS漏洞等级: 高危CVE-ID：N/A披露时间：供应商通知：2015年8月31日公开披露：2015年9月4日漏洞详情：1）允许远程攻击者在没有CSRF令牌的情况下，在MySQL数据库中执行任意的SQL命令。2）listabd2.jsp中存在XSS的切入点。请求方法：POST ...

PT-2015-7367

Name of the Vulnerable Software and Affected Versions Sophos Cyberoam CR500iNG-XP firewall appliance versions prior to CyberoamOS 10.6.2 MR-1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username parameter to the "login.xml" endpoint...

PT-2014-8320

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions 11.3 through 11.4 IT360 versions 10.3 through 10.4 Social IT Plus version 11.0 Description The issue allows remote attackers or remote authenticated users to execute arbitrary SQL commands. This can be achieved...

ArticleFR 11.06.2014 - 'data.php' Privilege Escalation

Advisory ID: HTB23219 Product: ArticleFR Vendor: Free Reprintables Vulnerable Versions: 11.06.2014 and probably prior Tested Version: 11.06.2014 Advisory Publication: June 11, 2014 without technical details Vendor Notification: June 11, 2014 Public Disclosure: July 30, 2014 Vulnerability Type:...

PT-2014-4195

Name of the Vulnerable Software and Affected Versions CSP MySQL User Manager version 2.3 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the login field of the "/login" API endpoint. This could potentially lead to unauthorized access or data...

PT-2013-5495

Name of the Vulnerable Software and Affected Versions Sharetronix version 3.1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the fb user id or tw user id parameter to the 'signup' endpoint. Recommendations For Sharetronix version 3.1.1,...

PT-2013-5370

Name of the Vulnerable Software and Affected Versions PHPFox versions prior to 3.6.0 build4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the searchgender parameter to the "/user/browse/view /" API endpoint. Recommendations For versions prio...

PT-2013-4453

Name of the Vulnerable Software and Affected Versions This HTML Is Simple THIS versions prior to 1.2.4 Description The issue allows remote execution of arbitrary SQL commands via vectors related to op=page&id= in the URL. Recommendations For versions prior to 1.2.4, update to version 1.2.4 or lat...

PT-2012-6157 · Sinapsi +1 · Sinapsi Esolar Light Photovoltaic System Monitor +3

Name of the Vulnerable Software and Affected Versions: Sinapsi eSolar Light Photovoltaic System Monitor aka Schneider Electric Ezylog photovoltaic SCADA management server versions prior to 2.0.2870 2.2.12 Sinapsi eSolar versions prior to 2.0.2870 2.2.12 Sinapsi eSolar DUO versions prior to 2.0.28...

kesionCMS 8.0 background holding shell vulnerability-vulnerability warning-the black bar safety net

Some time ago Ghost brother, made a kesion arbitrary download vulnerability on the holding shell further generations. In fact, take the shell was very simple. Method of much is. Just a brother to me get a shell, I just made a to get the shell methods for your reference. The point of sql command...

PT-2012-2118

Name of the Vulnerable Software and Affected Versions DiY-CMS blog module version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the start parameter to various API endpoints, including "tags.php", "list.php", "index.php", "main index.php"...

CVE-2012-0868

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

Debian DSA-2418-1 : postgresql-8.4 - several vulnerabilities

Several local vulnerabilities have been discovered in PostgreSQL, an object-relational SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-0866 It was discovered that the permissions of a function called by a trigger are not checked. This...

DSA-2418-1 postgresql-8.4 - several

Bulletin has no description...

Oracle Database Server Multiple Unspecified Vulnerabilities

Oracle database server is prone to SQL command execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-5022

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...