Sql injection

SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core\admin\modules\developer\modules\designer\form-create.php. The attacker creates a crafted table name at admin/developer/modules/designer/ and the injection is...

CVE-2017-9427

SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core\admin\modules\developer\modules\designer\form-create.php. The attacker creates a crafted table name at admin/developer/modules/designer/ and the injection is...

CVE-2017-9427: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core\admin\modules\developer\modules\designer\form-create.php. The attacker creates a crafted table name at admin/developer/modules/designer/ and the injection is...

PT-2017-18912

Name of the Vulnerable Software and Affected Versions BigTree CMS versions prior to 4.2.19 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by creating a crafted table name at the "admin/developer/modules/designer/" endpoint and the...

WordPress WP-Testimonials SQL Injection

Exploit Title: WP-Testimonials 3.4.1 Union Based SQL Injection Date: 03-06-2017 Exploit Author: Dimitrios Tsagkarakis Website: dtsa.eu Software Link: https://en-gb.wordpress.org/plugins/wp-testimonials/ Vendor Homepage: http://www.sunfrogservices.com/web-programmer/wp-testimonials/ Version: 3.4.1...

Sql injection

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-7236: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-7236

SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2017-17598

Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager Core Package versions prior to 5.2.2P1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 5.2.2P1, update to version 5.2.2P1 or...

CVE-2016-4905

SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors...

PT-2017-8600

Name of the Vulnerable Software and Affected Versions WP-OliveCart versions prior to 3.1.3 WP-OliveCartPro versions prior to 3.1.8 Description A SQL injection issue allows attackers with administrator rights to execute arbitrary SQL commands. Recommendations For WP-OliveCart versions prior to...

CVE-2017-8917

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2017-18621

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.7.x before 3.7.1 Description A SQL injection issue allows attackers to execute arbitrary SQL commands. Recommendations For versions 3.7.x before 3.7.1, update to version 3.7.1 or later to resolve the issue...

CVE-2017-8917: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2017-17155

Name of the Vulnerable Software and Affected Versions ArrayOS versions prior to 9.4.0.135 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is possible when the portal bookmark function is enabled. Recommendations For versions prior to 9.4.0.135, upda...

CVE-2017-6557: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ArrayOS before AG 9.4.0.135, when the portal bookmark function is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

MetalGenix GeniXCMS SQL Injection Vulnerability (CNVD-2017-06841)

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A SQL injection vulnerability exists in the inc/lib/Control/Backend/menus.control.php file in MetalGenix...

CVE-2017-2120

SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-2120: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

PT-2017-15187

Name of the Vulnerable Software and Affected Versions WBCE CMS versions 1.1.10 and earlier Description A SQL injection issue allows an attacker with administrator rights to execute arbitrary SQL commands. Recommendations For WBCE CMS versions 1.1.10 and earlier, at the moment, there is no...