CVE-2013-4953

SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter...

CVE-2013-4952

SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2013-4945

Multiple SQL injection vulnerabilities in BMC Service Desk Express SDE 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the 1 ASPSESSIONIDASSRATTQ, 2 TABLEWIDGET1, 3 TABLEWIDGET2, 4 browserDateTimeInfo, or 5 browserNumberInfo cookie parameter to DashBoardGUI.aspx; or the 6 U...

Sql injection

SQL injection vulnerability in the server component in IBM Tivoli Remote Control 5.1.2 before 5.1.2-TIV-TRC512-IF0015 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5300

Name of the Vulnerable Software and Affected Versions Elemata CMS version RC 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in functions/global.php. Recommendations For Elemata CMS version RC 3.0, avoid using the id...

PT-2013-4107

Name of the Vulnerable Software and Affected Versions IBM Tivoli Remote Control version 5.1.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For IBM Tivoli Remote Control version 5.1.2, apply the fix 5.1.2-TIV-TRC512-IF0015 to resolve th...

Sql injection

SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179...

CVE-2013-3437: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179...

CVE-2013-4870

SQL injection vulnerability in the News Search newssearch extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager CUCM 7.1x through 9.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuh81766...

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager CUCM 7.1x through 9.11a allows remote attackers to execute arbitrary SQL commands via unspecified vectors, leading to discovery of encrypted credentials by leveraging metadata, aka Bug ID CSCuh01051...

CVE-2013-4870

SQL injection vulnerability in the News Search newssearch extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-3404

Cisco CUCM (7.1.x–9.1(1a)) is affected by a remote SQL injection vulnerability that allows an unauthenticated attacker to run arbitrary SQL via unspecified vectors and, via metadata, potentially reconstruct encrypted credentials. Exploitation can enable credential discovery and, in combination wi...

CVE-2013-3412

Cisco Unified Communications Manager (CUCM) is affected by a blind SQL injection vulnerability (CVE-2013-3412) in versions 7.1(x) through 9.1(2). The issue allows an authenticated, remote attacker to execute arbitrary SQL commands via unspecified vectors, potentially impacting confidentiality, in...

PT-2013-4369

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 7.1x through 9.12 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions 7.1x through 9.12, update to a version that...

CVE-2013-3404

SQL injection vulnerability in Cisco Unified Communications Manager CUCM 7.1x through 9.11a allows remote attackers to execute arbitrary SQL commands via unspecified vectors, leading to discovery of encrypted credentials by leveraging metadata, aka Bug ID CSCuh01051...

PT-2013-5247

Name of the Vulnerable Software and Affected Versions News Search news search extension version 0.1.0 for TYPO3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For News Search news search extension version 0.1.0, at the moment, there is no...

PT-2013-4361

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 7.1x through 9.11a Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands, potentially leading to the discovery of encrypted credentials by leveraging metadata...

CVE-2013-3578

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...

Sql injection

SQL injection vulnerability in the management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...