CVE-2014-4644

SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2014-4644

CVE-2014-4644 (Cacti Superlinks Plugin 1.4-2) : A SQL injection vulnerability exists in the superlinks.php file of the Superlinks plugin for Cacti (version 1.4-2). The vulnerability is triggered via the id parameter, enabling remote attackers to execute arbitrary SQL commands. Public exploit acti...

PT-2014-6041

Name of the Vulnerable Software and Affected Versions Cacti superlinks plugin versions 1.4 through 2 Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the superlinks.php file. This can be exploited by sending malicious input to the vulnerable...

web2Project 3.1 - Multiple Vulnerabilities

web2Project 3.1 - Multiple Vulnerabilities Advisory ID: HTB23213 Product: web2Project Vendor: http://web2project.net Vulnerable Versions: 3.1 and probably prior Tested Version: 3.1 Advisory Publication: April 30, 2014 without technical details Vendor Notification: April 30, 2014 Vendor Patch: May...

PT-2014-5517

Name of the Vulnerable Software and Affected Versions BoonEx Dolphin versions 7.1.4 and earlier Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This can be exploited by remote attackers by leveraging a separate vulnerability. Recommendations For...

CVE-2014-1650

SQL injection vulnerability in user.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-1651

SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in user.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2949

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4305

Multiple SQL injection vulnerabilities in NICE Recording eXpress aka Cybertech eXpress 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter...

CVE-2014-4307

SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter...

PT-2014-4280

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 5.2, update to version 5.2 or later to resolve the issue...

PT-2014-5802

Name of the Vulnerable Software and Affected Versions WebTitan versions prior to 4.04 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sortkey parameter in the categories-x.php file. Recommendations For versions prior to 4.04, update to...

web2Project 3.1 SQL Injection

Advisory ID: HTB23213 Product: web2Project Vendor: http://web2project.net Vulnerable Versions: 3.1 and probably prior Tested Version: 3.1 Advisory Publication: April 30, 2014 without technical details Vendor Notification: April 30, 2014 Vendor Patch: May 1, 2014 Public Disclosure: June 18, 2014...

CVE-2014-2949: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2014-5800

Name of the Vulnerable Software and Affected Versions NICE Recording eXpress aka Cybertech eXpress versions 6.5.7 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The exact vectors used fo...

PT-2014-4279

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via unspecified vectors in the user.php file of the management console. Recommendation...

PT-2014-4977

Name of the Vulnerable Software and Affected Versions F5 ARX Data Manager versions 3.0.0 through 3.1.0 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is a result of a SQL injection vulnerability in the web service. Recommendations For F5 ARX Data...