Sql injection

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 sortfield, 2 sortorder, and 3 sall parameters to user/index.php and b user/group/index.php; the id parameter to 4 info.php, 5 perms.php, 6...

Sql injection

SQL injection vulnerability in pokazpodkat.php in BestShopPro allows remote attackers to execute arbitrary SQL commands via the str parameter...

Sql injection

SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-4801

SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System ASAS Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2011-4802

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 sortfield, 2 sortorder, and 3 sall parameters to user/index.php and b user/group/index.php; the id parameter to 4 info.php, 5 perms.php, 6...

CVE-2011-4801: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System ASAS Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

PT-2011-5107

Name of the Vulnerable Software and Affected Versions Authenex Strong Authentication System ASAS Server versions 3.1.0.2 through 3.1.0.3 Description The issue allows remote attackers to execute arbitrary SQL commands via the username parameter in the akeyActivationLogin.do endpoint. Recommendatio...

PT-2011-5114

Name of the Vulnerable Software and Affected Versions Joomla! component com hmcommunity version prior to 1.01 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a 'fnd home' action to 'index.php'. Recommendations For...

DDIVRT-2011-38 KnowledgeTree login.php Blind SQL Injection

Title ----- DDIVRT-2011-38 KnowledgeTree login.php Blind SQL Injection Severity -------- High Date Discovered --------------- November 18, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: sxkeebler and r@b13$ Vulnerability Description...

PT-2011-4939

Name of the Vulnerable Software and Affected Versions colord versions prior to 0.1.15 Description The issue concerns SQL injection vulnerabilities in the colord software. These vulnerabilities are located in the cd-mapping-db.c and cd-device-db.c files. They allow local users to execute arbitrary...

CVE-2011-4349: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in 1 cd-mapping-db.c and 2 cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and a device id, b property, or c profile id...

CVE-2011-2917

SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter...

CVE-2011-2917

CVE-2011-2917 describes a SQL injection vulnerability in Mambo CMS

KnowledgeTree login.php Blind SQL Injection

No description provided by source. Digital Defense, Inc. Vulnerability Research Team Credit: sxkeebler and r b13$ Vulnerability Description ------------------------- The KnowledgeTree login.php login page is vulnerable to a blind SQL injection vulnerability within the username field. An attacker...

PT-2011-5045

Name of the Vulnerable Software and Affected Versions Pixie CMS versions 1.01 through 1.04 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the pixie user parameter and the Referer HTTP header in a request to the default URI. Recommendation...

CVE-2011-4674

SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to execute arbitrary SQL commands via the onlyhostid parameter...

CVE-2011-4673

SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-4674

SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to execute arbitrary SQL commands via the onlyhostid parameter...

Sql injection

Multiple SQL injection vulnerabilities in Valid tiny-erp 1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to 1 partnerlist.php, 2 proioncategorylist.php, 3 rantevoulist.php, 4 syncategorylist.php, 5 synallasomenoslist.php, 6...

Sql injection

SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to execute arbitrary SQL commands via the onlyhostid parameter...