15490 matches found
CVE-2012-1778
SQL injection vulnerability in artykulprint.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter...
Sql injection
SQL injection vulnerability in artykulprint.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter in a profile action to index.php...
CVE-2012-1784
This CVE concerns SQL injection in MyJobList 0.1.3. The vulnerability is triggered via the eid parameter in the profile action to index.php, allowing remote attackers to execute arbitrary SQL commands. The root cause is unsanitized input in the affected parameter, leading to potentially partial t...
PT-2012-3531
Name of the Vulnerable Software and Affected Versions SocialCMS version 1.0.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the category parameter in the "search.php" file. Recommendations For SocialCMS version 1.0.5, consider restricting...
PT-2012-3535
Name of the Vulnerable Software and Affected Versions MyJobList version 0.1.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the eid parameter in a profile action to "index.php". Recommendations For MyJobList version 0.1.3, avoid using the ei...
PT-2012-3529
Name of the Vulnerable Software and Affected Versions CreateVision CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the artykul print.php file. Recommendations At the moment, there is no information about a...
CVE-2012-0293
Multiple SQL injection vulnerabilities in Symantec Altiris WISE Package Studio before 8.0MR1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-0293: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Symantec Altiris WISE Package Studio before 8.0MR1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2012-2469
Name of the Vulnerable Software and Affected Versions Symantec Altiris WISE Package Studio versions prior to 8.0MR1 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 8.0MR1, update to version 8.0MR1 or later to resolve the issue...
CVE-2012-1557
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU2, 9.x before 9.5 MU11, 10.0.x before MU13, 10.1.x before MU22, 10.2.x before MU16, and 10.3.x before MU5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU2, 9.x before 9.5 MU11, 10.0.x before MU13, 10.1.x before MU22, 10.2.x before MU16, and 10.3.x before MU5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-1557
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU2, 9.x before 9.5 MU11, 10.0.x before MU13, 10.1.x before MU22, 10.2.x before MU16, and 10.3.x before MU5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-1557: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU2, 9.x before 9.5 MU11, 10.0.x before MU13, 10.1.x before MU22, 10.2.x before MU16, and 10.3.x before MU5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2012-3344
Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel versions 7.x through 8.x before 8.6 MU2 Parallels Plesk Panel versions 9.x before 9.5 MU11 Parallels Plesk Panel versions 10.0.x before MU13 Parallels Plesk Panel versions 10.1.x before MU22 Parallels Plesk Panel versions...
PT-2012-2880
Name of the Vulnerable Software and Affected Versions SQLAlchemy versions prior to 0.7.0b4 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the limit or offset keyword to the select function. Additionally, unspecified vectors to the...
Sql injection
Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via 1 a SOAP message to the Printer.getPrinterAgentKey function in the SoapServlet servlet, 2 the User.updateUserValue functio...
CVE-2011-4487
SQL injection vulnerability in Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allows remote attacke...
Sql injection
SQL injection vulnerability in Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allows remote attacke...