CVE-2016-5048

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

CVE-2016-5817

Navis WebAccess (Navis, a Navis/Navis, Inc. product) is affected by CVE-2016-5817, a SQL injection vulnerability in news pages that allowed remote attackers to execute arbitrary SQL via unspecified vectors. The vulnerability targets WebAccess versions prior to the August 10, 2016 patch release; N...

CVE-2016-5792

SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields...

CVE-2016-5792

SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields...

Sql injection

SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields...

CVE-2016-5792: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields...

CVE-2016-4999

SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the 1 Data Set Authoring or 2...

Sql injection

SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the 1 Data Set Authoring or 2...

Huge-IT Portfolio Gallery manager SQL Injection Vulnerability

Huge-IT Portfolio Gallery manager is Huge-IT team developed an extension plugin for Joomla! in the management and display of photos, videos and so on. A SQL injection vulnerability exists in Huge-IT Portfolio Gallery manager v1.1.5. An attacker can exploit this vulnerability to inject arbitrary S...

CVE-2016-4837

SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2016-6175

Name of the Vulnerable Software and Affected Versions EC-CUBE Seed Coupon plugin versions prior to 1.6 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.6, update to version 1.6 or later to resolve the issue...

CVE-2016-4522

SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2016-6000

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk EnergyMetrix versions prior to 2.20.00 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.20.00, update to version 2.20.00 or lat...

CVE-2016-4522: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the 1 ID or 2 Branch parameter...

CVE-2016-5653

Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the 1 ID or 2 Branch parameter...

PT-2016-6615

Name of the Vulnerable Software and Affected Versions Misys FusionCapital Opics Plus affected versions not specified Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the ID or Branch parameter. Recommendations At the moment, there is ...

CVE-2016-1446

SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuy83200...

Sql injection

SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuy83200...