CVE-2013-5318

SQL injection vulnerability in Ginkgo CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the rang parameter to index.php...

CVE-2013-5318

Ginkgo CMS 5.0 is affected by an SQL Injection vulnerability in the rang parameter of index.php. Root cause is unsafe handling of user-supplied rang input, enabling remote attackers to craft SQL commands. Documented in multiple sources (CVE-2013-5318, DSquare E-353). Impact is potential arbitrary...

CVE-2013-5321: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...

PT-2013-5482

Name of the Vulnerable Software and Affected Versions CoolURI extension versions prior to 1.0.30 for TYPO3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For CoolURI extension versions prior to 1.0.30, update to version 1.0.30 or later to resolve...

PT-2013-5478

Name of the Vulnerable Software and Affected Versions Ginkgo CMS version 5.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the rang parameter to the "index.php" endpoint. Recommendations For Ginkgo CMS version 5.0, avoid using the rang...

CVE-2013-5322: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5311

CVE-2013-5311: Affected software is Vastal I-Tech phpVID 1.2.3. The vulnerability is SQL injection via the n parameter in browse_videos.php and members.php (cat parameter noted as covered by CVE-2008-4157). Impact is remote SQL command execution as described in the public records. Connected docum...

CVE-2013-5304

SQL injection vulnerability in the Store Locator locator extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Browser - TYPO3 without PHP browser extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Store Locator locator extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5466

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 4.5.5 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 4.5.5, update to version 4.5.5 or later to resolve the issue...

PT-2013-5470

Name of the Vulnerable Software and Affected Versions TYPO3 DB Integration wfqbe extension versions prior to 2.0.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve...

CVE-2013-5310: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DB Integration wfqbe extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5306: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Browser - TYPO3 without PHP browser extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5462

Name of the Vulnerable Software and Affected Versions TYPO3 ke search extension versions prior to 1.4.1 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issue...

PT-2013-5464

Name of the Vulnerable Software and Affected Versions TYPO3 Store Locator locator extension versions prior to 3.1.5 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 3.1.5, update to version 3.1.5 or later to resolve the issue...

Sql injection

SQL injection vulnerability in PHPFox before 3.6.0 build4 allows remote attackers to execute arbitrary SQL commands via the searchgender parameter to user/browse/view/...

Sql injection

SQL injection vulnerability in PHPFox before 3.6.0 build6 allows remote attackers to execute arbitrary SQL commands via the searchsortby parameter to user/browse/view/...

Sql injection

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php...

CVE-2013-4879

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php...