CVE-2011-5071

Multiple SQL injection vulnerabilities in Support Incident Tracker aka SiT! before 3.64 allow remote attackers to execute arbitrary SQL commands via the 1 exc parameter to reportmarketing.php, 2 selected parameter to tasks.php, 3 sites parameter to billableincidents.php, or 4 searchstring paramet...

Sql injection

SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter...

Sql injection

SQL injection vulnerability in incidentattachments.php in Support Incident Tracker aka SiT! 3.65 allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name...

PT-2012-1739

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description The issue allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name in the incident attachments.php script. Recommendations For version...

PT-2012-2049

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! versions prior to 3.64 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the exc parameter to "report marketing.php", the...

PT-2012-2962

Name of the Vulnerable Software and Affected Versions Aryadad CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the PageID parameter in Default.aspx. Recommendations At the moment, there is no information about a newer version...

CVE-2012-0935: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter...

CVE-2012-0069

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

Sql injection

SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information...

CVE-2012-0069

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

CVE-2012-0912

SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-0913: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information...

CVE-2012-0912: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-2274

Name of the Vulnerable Software and Affected Versions Batavi versions prior to 1.2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the boxToReload parameter in the "ajax.php" endpoint. Recommendations For versions prior to 1.2.1, update to...

PT-2012-2944

Name of the Vulnerable Software and Affected Versions Stoneware webNetwork versions prior to 6.0.8.0 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 6.0.8.0, update to version 6.0.8.0 or later to resolve the issue...

CVE-2012-0905

SQL injection vulnerability in deV!L'z Clanportal DZCP Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php...

Sql injection

SQL injection vulnerability in deV!L'z Clanportal DZCP Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php...

Sql injection

SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal DZCP 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php...

CVE-2012-0905

SQL injection vulnerability in deV!L'z Clanportal DZCP Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php...