15473 matches found
CVE-2016-2301: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-2299
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-2301
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
PT-2016-5104
Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions prior to 5.0 build 4522 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 5.0 build 4522, update to version 5.0 build 4522 or later to...
CVE-2016-3688
SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to dwr/call/plaincall/UserAjax.getUsersList.dwr...
CVE-2016-3688
SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to dwr/call/plaincall/UserAjax.getUsersList.dwr...
Sql injection
SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to dwr/call/plaincall/UserAjax.getUsersList.dwr...
PT-2016-4359
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.1 through 12.1.0.2 Description The issue allows remote attackers to affect availability and potentially bypass security restrictions, execute arbitrary SQL commands, and gain access to sensitive data. The...
PT-2016-5816
Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.2 Description The issue allows remote administrators to execute arbitrary SQL commands. This is achieved via the orderby parameter in the Workflow Screen. Recommendations For versions prior to 3.3.2, update to...
ProjectSend Multiple Vulnerabilities (Apr 2016) - Active Check
ProjectSend is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:projectsend:projectsend";...
Apache Jetspeed SQL Injection (CVE-2016-0710)
An SQL injection vulnerability exists in Apache Jetspeed. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
OCS Inventory NG SQL Injection Vulnerability
OCS Inventory NG Open Computer and Software Inventory Next Generation is a system management software that helps administrators keep track of computer software installations and configurations, and enables low network traffic communication between HTTP proxies and servers. OCS Inventory NG suffer...
CVE-2015-7999
Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-7999
Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-7999: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
PT-2016-3846
Name of the Vulnerable Software and Affected Versions Citrix Command Center versions prior to 5.1 Build 36.7 Citrix Command Center versions prior to 5.2 Build 44.11 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors due to multiple SQ...
CVE-2016-3172
SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action...
DEBIAN-CVE-2016-3172
SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action...
