15474 matches found
WordPress Photo Gallery plugin <= 1.2.100 - SQL Injection
Because of this vulnerability, authenticated users can execute arbitrary SQL commands via "the ascordesc" parameter in the galleriesbwg page to wp-admin/admin.php. Solution Upgrade the plugin...
PT-2015-5242
Name of the Vulnerable Software and Affected Versions CatBot version 0.4.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the lastcatbot parameter in the "index.php" endpoint. Recommendations For CatBot version 0.4.2, consider restricting...
PT-2015-5247
Name of the Vulnerable Software and Affected Versions ferretCMS version 1.0.4-alpha Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the p parameter in an update action to the "admin.php" endpoint. Recommendations For...
CVE-2014-9573
SQL injection vulnerability in manageuserpage.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote administrators with FILE privileges to execute arbitrary SQL commands via the MANTISMANAGEUSERSCOOKIE cookie...
PT-2015-4283
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.19 MantisBT versions 1.3.x prior to 1.3.0-beta.2 Description The issue allows remote administrators with FILE privileges to execute arbitrary SQL commands. This is achieved via the MANTIS MANAGE USERS COOKIE cook...
Sql injection
SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2015-1310
SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2015-1310: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
PT-2015-5202
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise Sybase ASE affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The estimated number of potentially affected devices and details about...
Sql injection
SQL injection vulnerability in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request...
MyBB 1.8.x < 1.8.2 Multiple Vulnerabilities
Binary data 8618.prm...
PT-2015-3876
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.2.0.4 Oracle Database Server versions 12.1.0.1 through 12.1.0.2 Description The issue affects confidentiality, integrity, and availability. It may be related to a stack-based buffer overflow ...
Sql injection
SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine CFME 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter...
PT-2015-5042
Name of the Vulnerable Software and Affected Versions Photo Gallery plugin version 1.2.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the order by parameter in a GalleryBox action to the "/wp-admin/admin-ajax.php" API endpoint...
CVE-2014-9560
SQL injection vulnerability in redirlastpostlist.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter...
Sql injection
SQL injection vulnerability in redirlastpostlist.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter...
CVE-2014-9560
SQL injection vulnerability in redirlastpostlist.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter...
CVE-2014-10038
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter...