[SECURITY] [DSA 3250-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3250-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 04, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3250-1 (wordpress - security update)

Multiple security issues have been discovered in Wordpress, a weblog manager, that could allow remote attackers to upload files with invalid or unsafe names, mount social engineering attacks or compromise a site via cross-site scripting, and inject SQL commands. More information can be found in t...

Debian: Security Advisory (DSA-3250-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1397

SQL injection vulnerability in the getCsvFile function in the MageAdminhtmlBlockWidgetGrid class in Magento Community Edition CE 1.9.1.0 and Enterprise Edition EE 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularityfieldexpr parameter when the popularityfrom ...

CVE-2015-3345

SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows remote administrators to execute arbitrary SQL commands via unspecified vectors, related to the "phpList database."...

Sql injection

SQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows remote administrators to execute arbitrary SQL commands via unspecified vectors, related to the "phpList database."...

CVE-2015-3346

The CVE-2015-3346 entry documents an SQL injection vulnerability in the Drupal WikiWiki module for 6.x-1.x before 6.x-1.2, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. The issue affects the WikiWiki module (Drupal contrib) and is tied to improper input sani...

CVE-2015-3346

SQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

F5 FirePass SQL injection vulnerability CVE-2012-1777

F5 FirePass is prone to an SQL injection vulnerability. Copyright C 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Sql injection

SQL injection vulnerability in the Interactive Voice Response IVR component in Cisco Unified Communications Manager UCM 10.51.98991.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563...

Sql injection

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

CVE-2014-9145

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

CVE-2014-9145

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

DIY CMS 1.0 Poll - Multiple Vulnerabilities (CVE-2012-6518)

Multiple web vulnerabilities were discovered in DIY v1.0 Content Management System. The vulnerabilities are due to improper input validation within several methods. Successful exploitation of these vulnerabilities may allow an attacker to execute arbitrary SQL commands which can result in the...

Sql injection

Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitrary SQL commands via a 1 hits parameter in a samhits action to sam-ajax.php; the 2 cstr parameter in a loadposts action to sam-ajax-admin.php; the 3 searchTe...

Sql injection

SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq52515...

Question2Answer 1.7 Cross Site Scripting

Title: Script Question2Answer 1.7 - Stored XSS Vulnerability + Author: s0w + Tested On Windows & Linux + Date: 21/03/2015 + Type: Web Application + Script Download: https://github.com/q2a/question2answer + Vendor Homepage: http://www.question2answer.org + Vulnerability...

CVE-2015-2679

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php or 2 username parameter to gxadmin/login.php...

Sql injection

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php or 2 username parameter to gxadmin/login.php...