Sql injection

SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy...

CVE-2015-4426

SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy...

CVE-2015-6519

SQL injection vulnerability in Arab Portal 3 allows remote attackers to execute arbitrary SQL commands via the showemail parameter in a signup action to members.php...

Sql injection

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

CVE-2015-6512

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

PT-2015-6587

Name of the Vulnerable Software and Affected Versions pimcore versions prior to build 3473 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the filter parameter to the "admin/asset/grid-proxy" API endpoint. Recommendations For versions prior to...

PT-2015-6956

Name of the Vulnerable Software and Affected Versions Novalnet Payment Module Ubercart module for Drupal affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version th...

CVE-2015-5504: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-7280

Name of the Vulnerable Software and Affected Versions sysPass versions 1.0.9 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the search parameter to the "ajax/ajax search.php" API endpoint. Recommendations For sysPass...

CVE-2015-4634

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

Sql injection

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

CVE-2015-4634

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

PT-2015-5327

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions 12.1 through 12.1 before 12.1-RU6-MP1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Symantec Endpoint Protection Manager SEPM...

CVE-2015-1491: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6645

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.8e Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the local graph id parameter in the "graphs.php" file. Recommendations For versions prior to 0.8.8e, update to...

Cacti Multiple Vulnerabilities (Jun 2015)

Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cacti:cacti"; ifdescription...

Sql injection

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...