PT-2015-6956

Name of the Vulnerable Software and Affected Versions Novalnet Payment Module Ubercart module for Drupal affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version th...

PT-2015-7280

Name of the Vulnerable Software and Affected Versions sysPass versions 1.0.9 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the search parameter to the "ajax/ajax search.php" API endpoint. Recommendations For sysPass...

PT-2015-6587

Name of the Vulnerable Software and Affected Versions pimcore versions prior to build 3473 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the filter parameter to the "admin/asset/grid-proxy" API endpoint. Recommendations For versions prior to...

CVE-2015-5504: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4634

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

Sql injection

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

CVE-2015-4634

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

PT-2015-5327

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions 12.1 through 12.1 before 12.1-RU6-MP1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Symantec Endpoint Protection Manager SEPM...

CVE-2015-1491: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6645

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.8e Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the local graph id parameter in the "graphs.php" file. Recommendations For versions prior to 0.8.8e, update to...

Cacti Multiple Vulnerabilities (Jun 2015)

Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cacti:cacti"; ifdescription...

Sql injection

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6019

Name of the Vulnerable Software and Affected Versions Sysphonic Thetis versions prior to 2.3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue...

CVE-2015-2972: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1560

SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon formerly Merethis Centreon 2.5.4 and earlier fixed in Centreon web 2.7.0 allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php...

CVE-2015-4614

Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2mimgsavemapname action to wp-admin/admin-ajax.php and other unspecified vectors...

CVE-2015-5452

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3...

Sql injection

SQL injection vulnerability in the AdvanceSearch.class in AdventNetPassTrix.jar in ManageEngine Password Manager Pro PMP before 8.1 Build 8101 allows remote authenticated users to execute arbitrary SQL commands via the ANDOR parameter, as demonstrated by a request to...