CVE-2015-0524

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-0524: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-4688

Name of the Vulnerable Software and Affected Versions EMC Secure Remote Services Virtual Edition ESRS VE versions 3.02 through 3.03 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 3.02 and 3.03, update to a version that contains a fix...

CVE-2015-1875

SQL injection vulnerability in a2billing/customer/iridiumthreed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter...

Sql injection

SQL injection vulnerability in a2billing/customer/iridiumthreed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter...

PT-2015-5481

Name of the Vulnerable Software and Affected Versions Elastix versions 2.5.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the transactionID parameter in the /a2billing/customer/iridium threed.php endpoint. Recommendations For...

CVE-2015-2183

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a 1 disporders detail or 2 subadminmgt edit action or 3 cid parameter in an editcurrency action to admin/...

Sql injection

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a 1 disporders detail or 2 subadminmgt edit action or 3 cid parameter in an editcurrency action to admin/...

CVE-2015-2183

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a 1 disporders detail or 2 subadminmgt edit action or 3 cid parameter in an editcurrency action to admin/...

Sql injection

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the 1 termid or 2 nyelvid parameter to index.php...

PT-2015-5683

Name of the Vulnerable Software and Affected Versions Webshop hun version 1.062S Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the termid or nyelv id parameter to the "index.php" endpoint. Recommendations For version 1.062S, consider...

PT-2015-4950

Name of the Vulnerable Software and Affected Versions All In One WP Security & Firewall plugin versions prior to 3.8.8 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For All In One WP Security & Firewall plugin versions prior to 3.8.8, update to...

Updated mapserver packages fix CVE-2013-7262 and packaging issues

Updated mapserver packages fix security vulnerability: SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TI...

Sql injection

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

CVE-2015-2196

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

Sql injection

Multiple SQL injection vulnerabilities in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow 1 remote authenticated users to execute arbitrary SQL commands via the itemid parameter in a wonderpluginaudiosaveitem action to wp-admin/admin-ajax.php or remote administrators to execut...

Sql injection

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

CVE-2015-2196

The CVE-2015-2196 issue affects WordPress Spider Event Calendar plugin (versions up to 1.4.9). The vulnerability arises in the spiderbigcalendar_month action when processing the cat_id parameter in wp-admin/admin-ajax.php, allowing an attacker to perform SQL injection. Impact described across sou...

Sql injection

SQL injection vulnerability in viewitem.php in ClipBucket 2.7 RC3 2.7.0.4.v2929-rc3 allows remote attackers to execute arbitrary SQL commands via the item parameter...

Sql injection

SQL injection vulnerability in the ajaxsurvey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows remote attackers to execute arbitrary SQL commands via the surveyid parameter in an ajaxsurvey action to wp-admin/admin-ajax.php...