PT-2012-3006

Name of the Vulnerable Software and Affected Versions OpenConf versions prior to 4.12 Description The issue allows remote attackers to execute arbitrary SQL commands via the pid parameter in the author/edit.php file. Recommendations For versions prior to 4.12, update to version 4.12 or later to...

Total Defense Suite UNC Management Console ExportReport SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ExportReport stored procedure, accessed via the management.asmx console. Th...

CVE-2012-1029

CVE-2012-1029 refers to a SQL injection vulnerability in Tube Ace (Adult PHP Tube Script) 1.6, specifically in mobile/search/index.php via the q parameter. The root cause is an SQL injection that could allow remote attackers to execute arbitrary SQL commands. Affected component: the q parameter i...

PT-2012-3028

Name of the Vulnerable Software and Affected Versions Tube Ace Adult PHP Tube Script version 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the q parameter in the "mobile/search/index.php" endpoint. Recommendations For Tube Ace Adult PHP...

PT-2012-2054

Name of the Vulnerable Software and Affected Versions HDWiki versions 5.0 through 5.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the PATH INFO to index.php, specifically targeting the model/comment.class.php file. Recommendation...

PT-2012-3016

Name of the Vulnerable Software and Affected Versions Basic Analysis and Security Engine BASE version 1.4.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in the base qry main.php file, specifically via the i...

CVE-2012-1017

Multiple SQL injection vulnerabilities in baseqrymain.php in Basic Analysis and Security Engine BASE 1.4.5 allow remote attackers to execute arbitrary SQL commands via the 1 ipaddr01, 2 ipaddr02, or 3 ipaddr09 parameters...

CVE-2012-0980

SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL commands via the file parameter...

Sql injection

SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the pricefrom parameter...

Sql injection

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

CVE-2012-0982

SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the pricefrom parameter...

CVE-2012-0983

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

CVE-2012-0980

SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL commands via the file parameter...

CVE-2012-0980

In phux Download Manager, CVE-2012-0980 describes an SQL injection vulnerability in download.php via the file parameter. The OpenVAS entry (phux Download Manager 'file' Parameter SQL Injection Vulnerability) confirms a classic SQLi risk allowing remote input to affect the database. The vulnerabil...

PT-2012-2988

Name of the Vulnerable Software and Affected Versions Vastal I-Tech Agent Zone aka The Real Estate Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the price from parameter in the "search.php" endpoint...

VulnCheck KEV: CVE-2012-1071

SQL injection vulnerability in the Kitchen recipe mvcooking extension before 0.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild as of February 2012...

PT-2012-2986

Name of the Vulnerable Software and Affected Versions phux Download Manager affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the file parameter in the "download.php" script. This can lead to unauthorized access and manipulation of...

CVE-2011-5072

Multiple SQL injection vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to portal/kb.php; 2 contractid parameter to contractaddservice.php; 3 id parameter to editescalationpath.php; 4 unlock, 5 lock...

Sql injection

Multiple SQL injection vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to portal/kb.php; 2 contractid parameter to contractaddservice.php; 3 id parameter to editescalationpath.php; 4 unlock, 5 lock...

CVE-2011-3831

SQL injection vulnerability in incidentattachments.php in Support Incident Tracker aka SiT! 3.65 allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name...