Sql injection

SQL injection vulnerability in client-edit.php in ProjectSend formerly cFTP r561 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to users-edit.php...

PT-2015-5778

Name of the Vulnerable Software and Affected Versions com ecommercewd version 1.2.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the search category id, sort order, or filter manufacturer ids in a displayproducts action to "index.php"...

PT-2015-5779

Name of the Vulnerable Software and Affected Versions Vastal I-Tech phpVID versions 0.9.9 through 1.2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the order by parameter in the groups.php file. Recommendations For versions 0.9.9 through...

PT-2015-5780

Name of the Vulnerable Software and Affected Versions ProjectSend formerly cFTP version r561 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter to the "users-edit.php" endpoint. Recommendations For version r561, update ...

CVE-2015-2563: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands via the orderby parameter. NOTE: The cat parameter vector is already covered by CVE-2008-4157...

WordPress WPML plugin SQL injection vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WPML is one of the multi-language plug-ins. A SQL injection vulnerability exists in versions of the WordPress WPML...

CVE-2015-2314

SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer header in a wp-link-ajax action to comments/feed...

Sql injection

SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer header in a wp-link-ajax action to comments/feed...

PT-2015-5698

Name of the Vulnerable Software and Affected Versions WordPress SEO by Yoast plugin versions 1.5.7 and earlier, 1.6.x before 1.6.4, 1.7.x before 1.7.4 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the order by or order parameter in the "wpseo...

WordPress Pods Plugin <= 2.5.1.1 - Blind SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

Debian DSA-3183-1 : movabletype-opensource - security update

Multiple vulnerabilities have been discovered in Movable Type, a blogging system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-2184 Unsafe use of Storable::thaw in the handling of comments to blog posts could allow remote attackers to include and...

CVE-2015-2237

Multiple SQL injection vulnerabilities in Betster aka PHP Betoffice 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 showprofile.php or 2 categoryedit.php or 3 username parameter in a login to index.php...

CVE-2015-2237

Multiple SQL injection vulnerabilities in Betster aka PHP Betoffice 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 showprofile.php or 2 categoryedit.php or 3 username parameter in a login to index.php...

Sql injection

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-0524

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-4688

Name of the Vulnerable Software and Affected Versions EMC Secure Remote Services Virtual Edition ESRS VE versions 3.02 through 3.03 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 3.02 and 3.03, update to a version that contains a fix...

CVE-2015-0524: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1875

SQL injection vulnerability in a2billing/customer/iridiumthreed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter...

Sql injection

SQL injection vulnerability in a2billing/customer/iridiumthreed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter...

PT-2015-5481

Name of the Vulnerable Software and Affected Versions Elastix versions 2.5.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the transactionID parameter in the /a2billing/customer/iridium threed.php endpoint. Recommendations For...