CVE-2012-0906

SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal DZCP 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php...

CVE-2012-0905

CVE-2012-0905 : SQL injection vulnerability in the deV!L'z Clanportal (DZCP) Gamebase addon. The issue allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php. Affected component is the gamebase addon for DZCP; root cause is improper hand...

CVE-2012-0905: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in deV!L'z Clanportal DZCP Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php...

PT-2012-2276

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.1.0.5 through 10.2.0.5 Oracle Database Server versions 11.1.0.7 Oracle Database Server versions 11.2.0.2 Description The issue allows remote attackers to affect availability and bypass security restrictions...

MySQL < 4.1.12 / 5.0.4 Insecure Permissions

The remote MySQL server is earlier than 4.1.12 / 5.0.4 and thus reportedly creates a temporary file with insecure permissions and a predictable name, which could allow a local user to run arbitrary SQL commands. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17805;...

CVE-2011-4921

SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2011-4921

SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2011-5050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

PT-2012-2030

Name of the Vulnerable Software and Affected Versions Cyberoam UTM versions prior to 10.01.2 build 059 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the tableid parameter. Recommendations For versions prior to 10.01.2 buil...

Sql injection

SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2011-5038

SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2011-5038

SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2011-5039

Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to login.php, 3 the filter parameter to widget.dokumentilista.php, and 4 the finnalogid parameter to nalozinaslov.php...

CVE-2011-5031

Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 dfuserid and 2 dfpassword parameters. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 dfuserid and 2 dfpassword parameters. NOTE: some of these details are obtained from third party information...

CVE-2011-5022

SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter...

Sql injection

SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter...

Sql injection

Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 u parameter to fp.php, 2 epage parameter to newpage.php, 3 epost parameter to newpost.php, and 4 username parameter to login.php in admin/; or the 5 username parameter to...