CVE-2014-9005: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL commands via the 1 country, 2 gender1, or 3 gender2 parameter in a search action to index.php...

CVE-2014-8596

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the 1 submitid parameter in a 2 action to files/administration/submissions.php or 2 status parameter to files/administration/members.php...

CVE-2014-8499

Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro PMP and Password Manager Pro Managed Service Providers MSP edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCHALL parameter to 1 SQLAdvancedALSearchResult.cc or ...

CVE-2014-8498

SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro PMP and Password Manager Pro Managed Service Providers MSP edition before 7.1 build 7105 allows remote authenticated users to execute arbitrary SQL commands via the SEARCHALL parameter...

Sql injection

SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro PMP and Password Manager Pro Managed Service Providers MSP edition before 7.1 build 7105 allows remote authenticated users to execute arbitrary SQL commands via the SEARCHALL parameter...

Sql injection

Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro PMP and Password Manager Pro Managed Service Providers MSP edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCHALL parameter to 1 SQLAdvancedALSearchResult.cc or ...

Sql injection

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the 1 submitid parameter in a 2 action to files/administration/submissions.php or 2 status parameter to files/administration/members.php...

PT-2014-8562

Name of the Vulnerable Software and Affected Versions ManageEngine Password Manager Pro versions prior to 7.1 build 7105 ManageEngine Password Manager Pro Managed Service Providers edition versions prior to 7.1 build 7105 Description The issue allows remote authenticated users to execute arbitrar...

Joomla Component com_techfolio SQL Injection (CVE-2011-5113)

An SQL injection vulnerability has been reported in Joomla Com Techfolio. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_Jobline SQL Injection (CVE-2009-2554)

An SQL injection vulnerability has been reported in Joomla Com Jobline. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component jeeventcalendar SQL Injection (CVE-2010-2513)

An SQL injection vulnerability has been reported in Joomla Jeeventcalendar. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-8554

SQL injection vulnerability in the mcprojectgetattachments function in api/soap/mcprojectapi.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary SQL commands via the projectid parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1609...

CVE-2014-8554

SQL injection vulnerability in the mcprojectgetattachments function in api/soap/mcprojectapi.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary SQL commands via the projectid parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1609...

Joomla Component com_contact Info SQL Injection (CVE-2008-5494)

An SQL injection vulnerability has been reported in Digitalgreys Com Contactinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_liveticker SQL Injection (CVE-2008-6148)

An SQL injection vulnerability has been reported in Raven-worx Liveticker. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Qas codigo SQL Injection (CVE-2009-4714)

An SQL injection vulnerability has been reported in Alexandre Amaral Xoops Celepar. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module debaser SQL Injection (CVE-2007-1805)

An SQL injection vulnerability has been reported in Myxoops Debaser. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_joomlaDate SQL Injection (CVE-2008-6068)

An SQL injection vulnerability has been reported in Web Design Hero Joomladate. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_acstartseite SQL Injection

An SQL injection vulnerability has been reported in Joomla Com Acstartseite. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS module Articles SQL Injection (CVE-2007-3311)

An SQL injection vulnerability has been reported in Xoops Articles Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...