CVE-2014-10004

SQL injection vulnerability in admin/datafiles/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2014-100003

SQL injection vulnerability in includes/ym-downloadfunctions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ymdownloadid parameter to the default URI...

Sql injection

SQL injection vulnerability in admin/datafiles/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in includes/ym-downloadfunctions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ymdownloadid parameter to the default URI...

Sql injection

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the reqnewemail parameter...

Sql injection

Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 editblock.php, 2 editcat.php, 3 editnote.php, or 4 rmvtopic.php in admincp/...

Sql injection

SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2014-10029

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the reqnewemail parameter...

CVE-2014-10015

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2014-100003

SQL injection vulnerability in includes/ym-downloadfunctions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ymdownloadid parameter to the default URI...

CVE-2014-10004

SQL injection vulnerability in admin/datafiles/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2014-10023

Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 editblock.php, 2 editcat.php, 3 editnote.php, or 4 rmvtopic.php in admincp/...

CVE-2014-10020

SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2014-10017

Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 changeSort or 2 switch parameter in the uscesitemedit page to wp-admin/admin.php...

PT-2015-3659

Name of the Vulnerable Software and Affected Versions PHPJabbers Event Booking Calendar version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cid parameter in the "load-calendar.php" file. Recommendations For PHPJabbers Event Booking...

PT-2015-3661

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce plugin version 1.3.12 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the changeSort or switch parameter in the "usces itemedit" page to "wp-admin/admin.php"...

PT-2015-3676

Name of the Vulnerable Software and Affected Versions Taboada MacroNews version 1.0 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter in the news popup.php file. Recommendations For Taboada MacroNews version 1.0,...

PT-2015-3673

Name of the Vulnerable Software and Affected Versions FluxBB versions prior to 1.4.13 FluxBB versions 1.5.x prior to 1.5.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the req new email parameter in the "profile.php" file. Recommendations F...

PT-2015-3629

Name of the Vulnerable Software and Affected Versions mTouch Quiz versions prior to 3.0.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the quiz parameter in the wp-admin/edit.php endpoint. Recommendations For versions prior to...

PT-2015-3627

Name of the Vulnerable Software and Affected Versions iTechClassifieds version 3.03.057 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the PreviewNum parameter in ChangeEmail.php. Recommendations For iTechClassifieds version 3.03.057, conside...