PT-2014-6444

Name of the Vulnerable Software and Affected Versions EllisLab ExpressionEngine versions prior to 2.9.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the column filter or category parameter to "system/index.php" or the tbl sort...

PT-2014-7815

Name of the Vulnerable Software and Affected Versions Enalean Tuleap versions prior to 7.5.99.4 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the lobal txt parameter to plugins/docman API endpoint. Recommendations For versions prio...

PT-2014-8478

Name of the Vulnerable Software and Affected Versions Nuevoplayer for ClipShare versions 8.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ch parameter in the midroll.php file. Recommendations For Nuevoplayer for ClipShare...

PT-2014-8635

Name of the Vulnerable Software and Affected Versions SAP HANA version 1.00.60.379371 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. Recommendations For SAP HANA version 1.00.60.379371, at the moment, there is no information about a newer...

CVE-2014-3366

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted response, aka Bug ID CSCup88089...

CVE-2014-3446

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

Sql injection

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

CVE-2014-3446

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

Sql injection

SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via the userid parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php...

PT-2014-6506

Name of the Vulnerable Software and Affected Versions XRMS CRM version 1.99.2 Description The issue allows remote attackers to execute arbitrary SQL commands via the user id parameter to "plugins/webform/new-form.php", which is not properly handled by "plugins/useradmin/fingeruser.php"...

CVE-2014-3828

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 fixed in Centreon web 2.5.3 allow remote attackers to execute arbitrary SQL commands via 1 the indexid parameter to views/graphs/common/makeXMLListMetrics.php, 2 the sid parameter to...

PT-2014-5531

Name of the Vulnerable Software and Affected Versions Centreon versions 2.5.1 through 2.5.2 Centreon Enterprise Server version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the index id parameter to...

Sql injection

SQL injection vulnerability in xhr.php in InterWorx Web Control Panel aka InterWorx Hosting Control Panel and InterWorx-CP before 5.0.14 build 577 allows remote authenticated users to execute arbitrary SQL commands via the i parameter in a search action to the 1 NodeWorx , 2 SiteWorx, or 3...

CVE-2014-8375

SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL commands via the selectedgroup parameter in a gbajaxgetgroup action to wp-admin/admin-ajax.php...

CVE-2013-7406

SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL commands via the selectedgroup parameter in a gbajaxgetgroup action to wp-admin/admin-ajax.php...

CVE-2014-8375

SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL commands via the selectedgroup parameter in a gbajaxgetgroup action to wp-admin/admin-ajax.php...

CVE-2014-8375

GB Gallery Slideshow WordPress plugin 1.5 contains a SQL injection vulnerability in GBgallery.php. The issue is exploitable via the selected_group parameter in the gb_ajax_get_group action called through wp-admin/admin-ajax.php, allowing remote attackers (with appropriate privileges) to execute a...

PT-2014-3421

Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A SQL injection issue in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version that...