15472 matches found
PT-2017-8480
Name of the Vulnerable Software and Affected Versions Ktools.net Photostore versions prior to 4.7.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the email parameter in a "recover login" action within the mgr.login.php file. Recommendations...
CVE-2016-4893: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2017-8590
Name of the Vulnerable Software and Affected Versions SetsucoCMS affected versions not specified Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
Sql injection
Multiple SQL injection vulnerabilities in EyesOfNetwork aka EON 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 bpname, 2 display, 3 search, or 4 equipment parameter to module/monitoringged/gedfunctions.php or the 5 type parameter to...
CVE-2017-6088
Multiple SQL injection vulnerabilities in EyesOfNetwork aka EON 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 bpname, 2 display, 3 search, or 4 equipment parameter to module/monitoringged/gedfunctions.php or the 5 type parameter to...
CVE-2017-6088
Multiple SQL injection vulnerabilities in EyesOfNetwork aka EON 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 bpname, 2 display, 3 search, or 4 equipment parameter to module/monitoringged/gedfunctions.php or the 5 type parameter to...
CVE-2017-6088
Multiple SQL injection vulnerabilities in EyesOfNetwork aka EON 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 bpname, 2 display, 3 search, or 4 equipment parameter to module/monitoringged/gedfunctions.php or the 5 type parameter to...
Sql injection
SQL injection vulnerability in Pivotal Cloud Foundry PCF before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; UAA BOSH before 11.2 and 12.x before 12.2; Elastic Runtime before 1.6.29 and 1.7.x before 1.7.7; and Ops Manager 1.7.x before 1.7.8 allows remote authenticated...
PT-2017-16887
Name of the Vulnerable Software and Affected Versions EyesOfNetwork versions 5.0 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via several parameters to specific API endpoints, including bp name, display, search, or...
PT-2017-8499
Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF versions before 238 UAA versions 2.x before 2.7.4.4 UAA versions 3.x before 3.3.0.2 UAA versions 3.4.x before 3.4.1 UAA BOSH versions before 11.2 UAA BOSH versions 12.x before 12.2 Elastic Runtime versions before 1.6....
PT-2017-17815
Name of the Vulnerable Software and Affected Versions TYPO3 News module versions 5.3.2 and earlier Description The issue allows unauthenticated users to execute arbitrary SQL commands. This is achieved through vectors involving overwriteDemand for order and OrderByAllowed. Recommendations For...
TYPO3 News Module SQL Injection
This module exploits a SQL Injection vulnerability In TYPO3 NewsController.php in the news module 5.3.2 and earlier. It allows an unauthenticated user to execute arbitrary SQL commands via vectors involving overwriteDemand and OrderByAllowed. The SQL injection can be used to obtain password hashe...
Sql injection
SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program...
CVE-2017-7290
SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program...
CVE-2017-7290
SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program...
PT-2017-17639
Name of the Vulnerable Software and Affected Versions XOOPS versions prior to 2.5.8.1 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This can be achieved via the url parameter to the "findusers.php" endpoint. An example attack uses "into outfil...
CVE-2017-6550
Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson formerly ESBUS allow remote attackers to execute arbitrary SQL commands via the 1 TABLE parameter to esbus/servlet/GetSQLData or 2 QUERY parameter to KKLS9ReportingPortal/GetData...
CVE-2017-6550
Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson formerly ESBUS allow remote attackers to execute arbitrary SQL commands via the 1 TABLE parameter to esbus/servlet/GetSQLData or 2 QUERY parameter to KKLS9ReportingPortal/GetData...
CVE-2016-9087
SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the fileid parameter...