CVE-2015-1367

SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter...

Sql injection

SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter...

Sql injection

SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter to register/...

Sql injection

SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php...

CVE-2015-1367

SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter...

CVE-2015-1372

SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php...

PT-2015-5247

Name of the Vulnerable Software and Affected Versions ferretCMS version 1.0.4-alpha Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the p parameter in an update action to the "admin.php" endpoint. Recommendations For...

PT-2015-5242

Name of the Vulnerable Software and Affected Versions CatBot version 0.4.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the lastcatbot parameter in the "index.php" endpoint. Recommendations For CatBot version 0.4.2, consider restricting...

WordPress Photo Gallery plugin <= 1.2.100 - SQL Injection

Because of this vulnerability, authenticated users can execute arbitrary SQL commands via "the ascordesc" parameter in the galleriesbwg page to wp-admin/admin.php. Solution Upgrade the plugin...

CVE-2014-9573

SQL injection vulnerability in manageuserpage.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote administrators with FILE privileges to execute arbitrary SQL commands via the MANTISMANAGEUSERSCOOKIE cookie...

PT-2015-4283

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.19 MantisBT versions 1.3.x prior to 1.3.0-beta.2 Description The issue allows remote administrators with FILE privileges to execute arbitrary SQL commands. This is achieved via the MANTIS MANAGE USERS COOKIE cook...

Sql injection

SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2015-1310

SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2015-1310: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

PT-2015-5202

Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise Sybase ASE affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The estimated number of potentially affected devices and details about...

Sql injection

SQL injection vulnerability in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request...

PT-2015-3876

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.2.0.4 Oracle Database Server versions 12.1.0.1 through 12.1.0.2 Description The issue affects confidentiality, integrity, and availability. It may be related to a stack-based buffer overflow ...

MyBB 1.8.x < 1.8.2 Multiple Vulnerabilities

Binary data 8618.prm...

Sql injection

SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine CFME 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter...

PT-2015-5042

Name of the Vulnerable Software and Affected Versions Photo Gallery plugin version 1.2.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the order by parameter in a GalleryBox action to the "/wp-admin/admin-ajax.php" API endpoint...