Sql injection

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...

Sql injection

SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter...

Sql injection

SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS...

Sql injection

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter...

Sql injection

SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the playlistid parameter...

CVE-2013-3525

SQL injection vulnerability in Approvals/ in Request Tracker RT 4.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ShowPending parameter. NOTE: the vendor disputes this issue, stating "We were unable to replicate it, and the individual that reported it retracted...

CVE-2013-3527

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...

PT-2013-4454

Name of the Vulnerable Software and Affected Versions phpVMS Pop Up News module versions 2.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the itemid parameter in the popupnewsitem/ endpoint. Recommendations For phpVMS Pop Up New...

PT-2013-4463

Name of the Vulnerable Software and Affected Versions Virtual Access Monitor versions 3.10.17 and earlier Description The issue allows attackers to execute arbitrary SQL commands via unspecified vectors due to multiple SQL injection vulnerabilities. Recommendations For versions 3.10.17 and earlie...

PT-2013-4452

Name of the Vulnerable Software and Affected Versions vBulletin versions 5.0.0 Beta 11 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the nodeid parameter in the "index.php/ajax/api/reputation/vote" API endpoint...

PT-2013-4457

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.18.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the name parameter in the Form/Email array to either the "entry/signin" or "entry/passwordrequest"...

CVE-2013-3533: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Virtual Access Monitor 3.10.17 and earlier allow attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-2529

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Information Server WIS versions 4.0 SP1 through 5.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Invensys Wonderware Information Server WIS versions 4.0 SP...

CVE-2013-0684: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Invensys Wonderware Information Server WIS 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execute arbitrary SQL commands via 1 nedi/html/System-Export.php, 2 nedi/html/Devices-List.php, or 3 the Noma component...

Sql injection

SQL injection vulnerability in Cisco Network Admission Control NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095...

CVE-2013-1177

SQL injection vulnerability in Cisco Network Admission Control NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095...

Sql injection

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 edit.php or 2 import.php. NOTE: the view.php id vector is already covered by CVE-2008-2565.1 and the edit.php id vector is already covered by...

CVE-2013-1748

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 edit.php or 2 import.php. NOTE: the view.php id vector is already covered by CVE-2008-2565.1 and the edit.php id vector is already covered by...

CVE-2013-1748

CVE-2013-1748 corresponds to multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 . The issues allow remote attackers to execute arbitrary SQL commands through unspecified parameters to edit.php and import.php ; the description notes that the view.php and edit.php vectors are already ...