PT-2013-2945

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC Manager versions prior to 4.8.3.1 Cisco Network Admission Control NAC Manager versions 4.9.x prior to 4.9.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achiev...

CVE-2013-1177: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Network Admission Control NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095...

PT-2013-3219

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.2 through 11.2.0.3 Description The issue affects the availability of the system and allows remote attackers to bypass security restrictions, execute arbitrary SQL commands, and gain access to sensitive da...

Sql injection

SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to product...

PT-2013-4123

Name of the Vulnerable Software and Affected Versions ZAPms versions 1.41 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the pid parameter to the product. Recommendations For ZAPms versions 1.41 and earlier, avoid using the pid...

CVE-2013-3050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to product...

contacts: SQL Injection - ownCloud

ownCloud before 5.0.1 does not neutralize special elements that are passed to the SQL query in addressbookprovider.php which therefore allows an authenticated attacker to execute arbitrary SQL commands. Affected Software ownCloud Server 5.0.1 CVE-2013-1893 Action Taken It is recommended that all...

Server: contacts: SQL Injection

ownCloud before 5.0.1 does not neutralize special elements that are passed to the SQL query in addressbookprovider.php which therefore allows an authenticated attacker to execute arbitrary SQL commands. For more information please consult the official advisory. This advisory is licensed CC BY-SA ...

PT-2013-2931

Name of the Vulnerable Software and Affected Versions Cisco Connected Grid Network Management System CG-NMS affected versions not specified Description The issue concerns multiple SQL injection vulnerabilities in the device-management implementation. These vulnerabilities allow remote attackers t...

CVE-2013-1163: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746...

Sql injection

Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters...

PT-2013-2396

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Enterprise versions 5.6 and 8.x before 8.7 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is due to multiple SQL injection vulnerabilities. Recommendations For IBM Security...

CVE-2013-0511: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters...

CVE-2013-2690

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action...

Sql injection

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action...

CVE-2013-2690

CVE-2013-2690 is a SQL injection vulnerability in the SynConnect 2.0 login flow of Synchroweb Technology. The flaw affects index.php where an attacker can manipulate the loginid parameter in a logoff action to execute arbitrary SQL commands. Reported in NVD with a base score of 7.5 (HIGH) and net...

Sql injection

Multiple SQL injection vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to execute arbitrary SQL commands via 1 the nHistoryId parameter to WebProd/pages/pgHistory.asp or 2 the OrderBy parameter to WebProd/pages/pgadmin.asp...

CVE-2013-0123

Multiple SQL injection vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to execute arbitrary SQL commands via 1 the nHistoryId parameter to WebProd/pages/pgHistory.asp or 2 the OrderBy parameter to WebProd/pages/pgadmin.asp...

CVE-2013-0123

CVE-2013-0123 describes multiple SQL injection vulnerabilities in the ASKIA Askiaweb administration interface. The issues allow remote attackers to execute arbitrary SQL commands through two parameters: nHistoryId (WebProd/pages/pgHistory.asp) and OrderBy (WebProd/pages/pgadmin.asp). Affected com...

Sql injection

SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "the Query Object Model and relation values."...