Sql injection

Multiple SQL injection vulnerabilities in Postfix Admin aka postfixadmin before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the pw parameter to the pacrypt function, when mysqlencrypt is configured, or 2 unspecified vectors that are used in backup files generate...

CVE-2012-0811

Multiple SQL injection vulnerabilities in Postfix Admin aka postfixadmin before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the pw parameter to the pacrypt function, when mysqlencrypt is configured, or 2 unspecified vectors that are used in backup files generate...

CVE-2003-1598

SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the posts variable...

CVE-2003-1598: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the posts variable...

Sql injection

SQL injection vulnerability in the editgallery function in admin/galleryfunc.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php...

PT-2014-7808

Name of the Vulnerable Software and Affected Versions Huge-IT Image Gallery plugin version 1.0.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the removeslide parameter to the "/wp-admin/admin.php" API endpoint. Recommendations For...

PT-2017-7759

Name of the Vulnerable Software and Affected Versions Zabbix versions prior to 2.2.14 Zabbix versions 3.0 prior to 3.0.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the toggle ids array parameter in the "latest.php" endpoint...

CVE-2014-4424

SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4424

SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-5888

Name of the Vulnerable Software and Affected Versions Apple OS X Server versions prior to 2.2.3 Apple OS X Server versions 3.x prior to 3.2.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Apple OS X Server versions prior to 2.2.3,...

CVE-2014-4424: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4824

SQL injection vulnerability in IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4824

SQL injection vulnerability in IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2014-6142

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions prior to 7.2.3 Patch 1 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 7.2.3 Patch 1, update to 7.2.3 Patch 1 to...

CVE-2014-4824: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to apiv2.json. NOTE: this entry was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6658 is for the XSS...

PT-2014-2259

Name of the Vulnerable Software and Affected Versions SpiceWorks version 5.3.75941 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter to the "api v2.json" API endpoint. Recommendations For SpiceWorks version 5.3.75941,...

Sql injection

SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-4662

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Ecava IntegraXor...