CVE-2013-6872

SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action...

PT-2014-4261

Name of the Vulnerable Software and Affected Versions Cubic CMS versions 5.1.1 through 5.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the resource id or version id parameter to the "recursos/agent.php" endpoint, or the login or pass...

PT-2014-3288

Name of the Vulnerable Software and Affected Versions 2Glux Sexy Polling com sexypolling component versions prior to 1.0.9 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the answer id parameter in the vote.php file. Recommendation...

PT-2014-2596

Name of the Vulnerable Software and Affected Versions Hornbill Supportworks ITSM versions 1.0.0 through 3.4.14 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the callref parameter in the reports/calldiary.php file. Recommendations For version...

PT-2014-3211

Name of the Vulnerable Software and Affected Versions Collabtive versions prior to 1.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter in a "projectpdf" action within the managetimetracker.php file. Recommendations F...

CVE-2012-6626

SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field...

Sql injection

SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action...

Sql injection

SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field...

PT-2014-2395

Name of the Vulnerable Software and Affected Versions b2ePMS version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username field in the verify-user.php file. Recommendations For b2ePMS version 1.0, consider restricting access to the...

CVE-2014-1466

SQL injection vulnerability in CSP MySQL User Manager 2.3 allows remote attackers to execute arbitrary SQL commands via the login field of the login page...

Sql injection

SQL injection vulnerability in CSP MySQL User Manager 2.3 allows remote attackers to execute arbitrary SQL commands via the login field of the login page...

Sql injection

SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...

CVE-2014-1466

SQL injection vulnerability in CSP MySQL User Manager 2.3 allows remote attackers to execute arbitrary SQL commands via the login field of the login page...

CVE-2014-1466

CVE-2014-1466 affects CSP MySQL User Manager 2.3 and is caused by an SQL injection (SQLi) in the login field of the login page. The vulnerability allows remote attackers to influence SQL commands executed by the application, with impact described as partial confidentiality, partial integrity, and...

PT-2014-4012

Name of the Vulnerable Software and Affected Versions Open Web Analytics OWA versions prior to 1.5.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the owa email address parameter in a base.passwordResetRequest action to "index.php"...

CVE-2014-1466: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CSP MySQL User Manager 2.3 allows remote attackers to execute arbitrary SQL commands via the login field of the login page...

Sql injection

SQL injection vulnerability in the miqpolicy controller in Red Hat CloudForms 2.0 Management Engine CFME 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile parameter in an explorer action...

CVE-2013-2050

SQL injection vulnerability in the miqpolicy controller in Red Hat CloudForms 2.0 Management Engine CFME 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile parameter in an explorer action...

CVE-2013-6321

SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite aka Atlas Policy Suit...

Sql injection

SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite aka Atlas Policy Suit...