WordPress BigContact Plugin <= 1.4.6 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

PT-2015-6152

Name of the Vulnerable Software and Affected Versions WP Symposium plugin versions prior to 15.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the show parameter in the QUERY STRING to the default URI in the forum.php file...

Sql injection

Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uid parameter in an addfriend action to ajax.php; id parameter in a 2 shareobject, 3 addtofav, 4 rating, or 5 flagobject action to ajax.php; cid...

CVE-2012-5849

Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uid parameter in an addfriend action to ajax.php; id parameter in a 2 shareobject, 3 addtofav, 4 rating, or 5 flagobject action to ajax.php; cid...

CVE-2012-5849

ClipBucket 2.6 Revision 738 and earlier is affected by multiple SQL injection vulnerabilities. The root cause is improper sanitization of input across several endpoints, notably /ajax.php parameters (uid; id with modes like share_object, add_to_fav, rating, flag_object; cid with add_new_item/remo...

CVE-2012-5849: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uid parameter in an addfriend action to ajax.php; id parameter in a 2 shareobject, 3 addtofav, 4 rating, or 5 flagobject action to ajax.php; cid...

Sql injection

Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 userpass parameter in gologin.php or the PATHINFO to 3 gologin/validatecredentials/admin/ or 4 index.php/gosite/gogetuserinfo/...

PT-2015-6368

Name of the Vulnerable Software and Affected Versions SAP CRM affected versions not specified Description A SQL injection issue in the Business Rules Framework CRM-BF-BRF of SAP CRM allows attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a...

PT-2015-5928

Name of the Vulnerable Software and Affected Versions GoAdmin CE versions prior to 3.3-1421902800 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the user name or user pass parameter in 'go login.php' or the PATH INFO to 'go login/validate...

Sql injection

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608...

PT-2015-4835

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 11.00.98000.225 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Unified Communications Manager version 11.00.98000.225, update to...

CVE-2015-0715: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608...

[SECURITY] [DSA 3250-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3250-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 04, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3250-1 (wordpress - security update)

Multiple security issues have been discovered in Wordpress, a weblog manager, that could allow remote attackers to upload files with invalid or unsafe names, mount social engineering attacks or compromise a site via cross-site scripting, and inject SQL commands. More information can be found in t...

Debian: Security Advisory (DSA-3250-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1397

SQL injection vulnerability in the getCsvFile function in the MageAdminhtmlBlockWidgetGrid class in Magento Community Edition CE 1.9.1.0 and Enterprise Edition EE 1.14.1.0 allows remote administrators to execute arbitrary SQL commands via the popularityfieldexpr parameter when the popularityfrom ...

CVE-2015-3345

SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows remote administrators to execute arbitrary SQL commands via unspecified vectors, related to the "phpList database."...

Sql injection

SQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows remote administrators to execute arbitrary SQL commands via unspecified vectors, related to the "phpList database."...

CVE-2015-3346

The CVE-2015-3346 entry documents an SQL injection vulnerability in the Drupal WikiWiki module for 6.x-1.x before 6.x-1.2, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. The issue affects the WikiWiki module (Drupal contrib) and is tied to improper input sani...