Sql injection

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

Sql injection

Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL commands via the 1 OBID parameter in a single action to admin/action/objects.php, 2 AREAID parameter in a single action to admin/action/areas.php, or 3 start parameter in a show action...

Sql injection

SQL injection vulnerability in havapost.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter...

Sql injection

SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter...

CVE-2012-5900

Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL commands via the 1 OBID parameter in a single action to admin/action/objects.php, 2 AREAID parameter in a single action to admin/action/areas.php, or 3 start parameter in a show action...

CVE-2012-5910

CVE-2012-5910 is a SQL injection in blogs/htsrv/viewfile.php of b2evolution 4.1.3. An authenticated remote user can inject SQL via the root parameter to execute arbitrary commands. Impact is partial confidentiality/integrity/availability as stated; attack vector is web-based with single-privilege...

CVE-2012-5910

SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter...

CVE-2012-5912

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

CVE-2012-5910: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter...

PT-2012-6190

Name of the Vulnerable Software and Affected Versions MyBB aka MyBulletinBoard version 1.6.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the conditionsusergroup parameter in a search action to "admin/index.php". Recommendations For MyBB ak...

PT-2012-6191

Name of the Vulnerable Software and Affected Versions b2evolution version 4.1.3 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the root parameter in the /blogs/htsrv/viewfile.php API endpoint. Recommendations For version 4.1.3,...

PT-2012-6175

Name of the Vulnerable Software and Affected Versions Havalite CMS versions 1.1.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the postId parameter in the hava post.php file. Recommendations For Havalite CMS versions 1.1.0 and earlier, update to ...

CVE-2012-4951

Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the 1 TerminalId, 2 ModelName, or 3 ApplicationName parameter...

CVE-2012-4951

Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the 1 TerminalId, 2 ModelName, or 3 ApplicationName parameter...

CVE-2012-4949

SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service...

CVE-2012-4949

CVE-2012-4949 is an SQL injection vulnerability in ESRI ArcGIS 10.1 where the where parameter in a REST service query URI can be exploited by remote authenticated users to execute arbitrary SQL. The root cause is inadequate sanitization of SQL commands in the where clause, enabling a subset of SQ...

CVE-2012-4949: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service...

The latest xdcms_v2. 0. 2 0DAY-vulnerability warning-the black bar safety net

Start. In the comments place lists. php file n"; $fields.="".$ value'name'."：n"; $fields.="".$ input-$value'formtype for'." ".$ value'explain'."n"; $fields.="n"; //Whether to display the CAPTCHA if$form'0''iscode'==1 $fields.="n"; $fields.="CAPTCHA:n"; $fields.="n"; $fields.="n";...

CVE-2011-5234

SQL injection vulnerability in user.php in Social Network Community 2 allows remote attackers to execute arbitrary SQL commands via the userId parameter...

CVE-2011-5235

SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link...