CVE-2012-4060

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

CVE-2012-2306: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-5173

Name of the Vulnerable Software and Affected Versions Uiga Fan Club affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p parameter in the "index2.php" endpoint. Recommendations At the moment, there is no...

PT-2012-3939

Name of the Vulnerable Software and Affected Versions Drupal Addressbook module versions 6.x-4.2 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 6.x-4.2 and earlier, update to a version later than 6.x-4.2 to...

Sql injection

SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data...

CVE-2012-3395

SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data...

CVE-2012-2961

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-3395: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data...

CVE-2012-2961: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-4113

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x through 5.0.3.17 Description The issue is related to a SQL injection vulnerability in the management console, allowing remote attackers to execute arbitrary SQL commands. This is a "blind SQL injection" issu...

PT-2012-4394

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x before 5.0.3.18 Description A SQL injection issue in the management console allows remote attackers to execute arbitrary SQL commands. Recommendations For Symantec Web Gateway versions 5.0.x before 5.0.3.18,...

PT-2012-4688

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.9 Moodle versions 2.1.x through 2.1.6 Moodle versions 2.2.x through 2.2.3 Description The issue allows remote authenticated users to execute arbitrary SQL commands via crafted form data. This is a result of a...

Sql injection

SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event...

CVE-2012-2363

SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event...

CVE-2012-2363: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event...

PT-2012-3984

Name of the Vulnerable Software and Affected Versions Moodle versions 1.9.x through 1.9.17 Description The issue allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event in the calendar implementation. Recommendations For Moodle versions 1.9.x through 1.9.1...

CVE-2012-0868

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

Crlf injection

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

CVE-2012-0868

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...

CVE-2012-0868: Improper Neutralization of Special Elements used in an SQL Command

CRLF injection vulnerability in pgdump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQ...