CVE-2010-4834

Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute arbitrary SQL commands via the 1 id parameter in a savedsearch action and 2 itemtypes parameter in a showitemsearch action in the...

Sql injection

Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute arbitrary SQL commands via the 1 id parameter in a savedsearch action and 2 itemtypes parameter in a showitemsearch action in the...

CVE-2010-4834

The CVE-2010-4834 entry describes multiple SQL injection flaws in index.php for OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition. The vulnerabilities reside in the search_management_manage subcontroller, where remote authenticated users can manipulate the (1) id parameter in a saved_s...

PT-2011-1773

Name of the Vulnerable Software and Affected Versions Joomla! JSupport com jsupport component version 1.5.6 Description The issue allows remote authenticated users with Public Back-end permissions to execute arbitrary SQL commands. This is achieved by exploiting the alpha parameter in either a...

PT-2011-1774

Name of the Vulnerable Software and Affected Versions Event Registration plugin versions 5.32 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the event id parameter in a "register" action. Recommendations For versions 5.32 and earlier, update to a...

PT-2011-1769

Name of the Vulnerable Software and Affected Versions OneOrZero AIMS versions 2.6.0 through 2.7.0 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the id parameter in a "saved search" action and the item types parameter in a "show...

CVE-2009-5090

SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possibly other unspecified vectors...

Sql injection

SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...

Sql injection

SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possibly other unspecified vectors...

Sql injection

SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL commands via the item parameter...

CVE-2009-5088

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...

CVE-2009-5094

SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL commands via the item parameter...

PT-2011-1337

Name of the Vulnerable Software and Affected Versions IdeaCart version 0.02 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cID parameter in the "secure/index.php" endpoint. Recommendations For IdeaCart version 0.02, consider restricting...

PT-2011-1013

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.2.0.4 Oracle Database Server version 12.1.0.1 Description The issue allows remote authenticated users to affect confidentiality, potentially via vectors related to SYS tables. Multiple...

PT-2011-1012

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.2.0.4 Oracle Database Server version 12.1.0.1 Description The issue allows remote authenticated users to affect integrity via unknown vectors. Multiple vulnerabilities in the current Oracle...

PT-2011-1019

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.2.0.4 Oracle Database Server version 12.1.0.1 Description The issue allows remote authenticated users to affect confidentiality. It enables attackers to bypass security restrictions, execute...

PT-2011-1016

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.2.0.4 through 10.2.0.5 Oracle Database Server versions 11.1.0.7 Oracle Database Server versions 11.2.0.2 through 11.2.0.3 Oracle Database Server version 12.1.0.1 Description The issue affects the...

PT-2011-1011

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.1.0.7 Oracle Database Server versions 11.2.0.3 through 11.2.0.3 Oracle Database Server versions 12.1.0.1 through 12.1.0.1 Description The issue allows remote attackers to affect availability...

PT-2011-1015

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.2 through 11.2.0.3 Oracle Database Server version 12.1.0.1 Description The issue allows remote authenticated users to affect confidentiality, integrity, and availability. It also enables remote attackers ...