Sql injection

SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tableprefix parameter...

Sql injection

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8668

SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8663

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-8670

Name of the Vulnerable Software and Affected Versions SAP Environment, Health, and Safety Management affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations At...

PT-2014-8344

Name of the Vulnerable Software and Affected Versions BulletProof Security plugin versions prior to .51.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the tableprefix parameter in the admin/htaccess/bpsunlock.php file. Recommendations For versions...

PT-2014-8674

Name of the Vulnerable Software and Affected Versions SAP Contract Accounting affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version that contains a f...

CVE-2014-8664: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Product Safety EHS-SAF component in SAP Environment, Health, and Safety Management allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8668: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8663: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8588

SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8586

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...

CVE-2014-7176

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...

Sql injection

SQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ch parameter...

Sql injection

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...

Sql injection

Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 columnfilter or 2 category parameter to system/index.php or the 3 tblsort0 parameter in the comment module to system/index.php...

Sql injection

SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...

CVE-2014-7176

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...

CVE-2014-8588

CVE-2014-8588 describes a SQL injection in SAP HANA metadata.xsjs (vulnerable in SAP HANA 1.00.60.379371). Remote attackers could execute arbitrary SQL commands via unspecified vectors. The NVD entry and multiple feeds confirm this CVE ID and vulnerability class; affected software is SAP HANA, co...