PT-2014-4662

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Ecava IntegraXor...

CVE-2014-2376: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Login.aspx in MPEX Business Solutions MX-SmartTimer before 13.19.18 allows remote attackers to execute arbitrary SQL commands via the ct100%24CPHContent%24password parameter...

Sql injection

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

CVE-2014-5440

SQL injection vulnerability in Login.aspx in MPEX Business Solutions MX-SmartTimer before 13.19.18 allows remote attackers to execute arbitrary SQL commands via the ct100%24CPHContent%24password parameter...

CVE-2014-5440

MX-SmartTimer (MPEX Business Solutions) is affected by CVE-2014-5440 due to an SQL injection in Login.aspx. The vulnerability enables remote attackers to send SQL commands via the ct100%24CPHContent%24password parameter in versions before 13.19.18, potentially bypassing authentication and executi...

PT-2014-6473

Name of the Vulnerable Software and Affected Versions MPEX Business Solutions MX-SmartTimer versions prior to 13.19.18 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ct100$CPHContent$password parameter in the Login.aspx file...

CVE-2014-6241

SQL injection vulnerability in the wtdirectory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-4240

SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter...

Sql injection

SQL injection vulnerability in the wtdirectory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter...

Sql injection

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6241

SQL injection vulnerability in the wtdirectory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6241

SQL injection vulnerability in the wtdirectory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6239

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6239

The CVE-2014-6239 issue affects the TYPO3 extension Address visualization with Google Maps (st_address_map). The vulnerability is a SQL injection in st_address_map prior to version 0.3.6 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The TYPO3 security bul...

CVE-2014-6233

SQL injection vulnerability in the Flat Manager flatmgr extension before 2.7.10 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-7112

Name of the Vulnerable Software and Affected Versions st address map extension versions prior to 0.3.6 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 0.3.6, update to version 0.3.6 or later to resolve the issue...

PT-2014-2278

Name of the Vulnerable Software and Affected Versions Group-Office community versions prior to 4.0.90 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the sort parameter in the modules/calendar/json.php file. Recommendations For...

PT-2014-7114

Name of the Vulnerable Software and Affected Versions TYPO3 wt directory extension versions prior to 1.4.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issu...