15495 matches found
CVE-2012-1061: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2012-3050
Name of the Vulnerable Software and Affected Versions GForge Advanced Server versions prior to 6.0.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 6.0.1, update to version 6.0.1 or later to resolve the issue...
PT-2012-3059
Name of the Vulnerable Software and Affected Versions TYPO3 extension mv cooking versions prior to 0.4.1 Description The issue allows remote attackers to execute arbitrary SQL commands. It has been exploited in the wild as of February 2012. Recommendations For versions prior to 0.4.1, update to...
PT-2012-3063
Name of the Vulnerable Software and Affected Versions TYPO3 extension 'Documents download rtg files' versions prior to 1.5.2 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.5.2, update to version 1.5.2 or later t...
PT-2012-3062
Name of the Vulnerable Software and Affected Versions TYPO3 White Papers mm whtppr extension version 0.0.4 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 0.0.4 and earlier, update to a version later than 0.0.4 ...
CVE-2012-1071: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Kitchen recipe mvcooking extension before 0.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild as of February 2012...
CVE-2012-1061
CVE-2012-1061 affects GForge Advanced Server 6.0.0 and all versions before 6.0.1. The issue is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Exploit details, affected subcomponents, and concrete impact are not provided in the...
PT-2012-3055
Name of the Vulnerable Software and Affected Versions WP-RecentComments plugin version 2.0.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in an rc-content action to "index.php". Recommendations For WP-RecentComments plugin...
CVE-2011-4341
Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author permissions to execute arbitrary SQL commands via the filter parameter to 1 symphony/publish/comments or 2...
Sql injection
Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author permissions to execute arbitrary SQL commands via the filter parameter to 1 symphony/publish/comments or 2...
CVE-2011-4341
Symphony CMS 2.2.3 (and possibly earlier 2.2.x) contains multiple SQL injection vulnerabilities in content.publish.php (filter parameter) that can be exploited by remote authenticated users with Author permissions to execute arbitrary SQL against (1) symphony/publish/comments or (2) symphony/publ...
Sql injection
SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2012-1002
SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2012-1026
Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...
CVE-2012-1029
SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...
CVE-2012-1022
SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the catparentid parameter in an addcat action...
Sql injection
Multiple SQL injection vulnerabilities in baseqrymain.php in Basic Analysis and Security Engine BASE 1.4.5 allow remote attackers to execute arbitrary SQL commands via the 1 ipaddr01, 2 ipaddr02, or 3 ipaddr09 parameters...
Sql injection
SQL injection vulnerability in model/comment.class.php in HDWiki 5.0, 5.1, and possibly other versions allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php. NOTE: some of these details are obtained from third party information...