CVE-2012-5227

CVE-2012-5227 affects Peel SHOPPING versions 2.8 and 2.9, where an SQL injection in administrer/tva.php via the id parameter allows remote execution of arbitrary SQL commands. Root cause: insufficient input validation leading to query composition. Affected software: Peel SHOPPING 2.8/2.9; vulnera...

PT-2012-5839

Name of the Vulnerable Software and Affected Versions Peel SHOPPING versions 2.8 through 2.9 Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the administrer/tva.php file. Recommendations For Peel SHOPPING versions 2.8 through 2.9, avoid usin...

Sql injection

Multiple SQL injection vulnerabilities in the getsamplefiltersbysignature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0, allow remote attackers to execute arbitrary SQL commands via the 1 agent or 2 object id...

CVE-2012-2998

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PostgreSQL: Multiple vulnerabilities

Background PostgreSQL is an open source object-relational database management system. Description Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact A remote attacker could spoof SSL connections. Furthermore, a remot...

PT-2012-4180

Name of the Vulnerable Software and Affected Versions Cumin versions prior to 0.1.5444 Red Hat Enterprise Messaging, Realtime, and Grid MRG version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is due to multiple SQL injection vulnerabilities in the get...

PT-2012-4423

Name of the Vulnerable Software and Affected Versions Trend Micro Control Manager versions prior to 5.5.0.1823 Trend Micro Control Manager version 6.0 before 6.0.0.1449 Description A SQL injection issue exists in the ad hoc query module, allowing remote attackers to execute arbitrary SQL commands...

Sql injection

SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-3088

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.7.x and 2.5.x before 2.5.2 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Joomla! versions 1.7.x, update to a version outside of the affected range. For Jooml...

CVE-2012-1116: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-1116

SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-5811

Name of the Vulnerable Software and Affected Versions OSClass versions prior to 2.3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter in a 1 edit category post or 2 enable category action to "index.php". Recommendations Fo...

CVE-2012-5162

Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 editcategorypost or 2 enablecategory action to index.php...

CVE-2011-5201

Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the 1 name and 2 msg parameters. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the 1 name and 2 msg parameters. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 list.php, 2 members.php, or 3 book.php...

Sql injection

SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-5101

SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-5098

Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to rate.php, 2 cid parameter to view.php, or 3 t parameter to pop.php...