PT-2011-2671

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.1.0.5 through 10.2.0.3 Oracle Enterprise Manager Grid Control version 10.1.0.6 Description The issue affects the confidentiality, integrity, and availability of the system, allowing remote attackers to bypass...

Cisco Unified Communications Manager Multiple SQL Injections (CVE-2011-1610)

Multiple SQL injection vulnerabilities have been reported in Cisco Unified Communications Manager. A remote attacker can exploit these vulnerabilities by sending a malicious request to the target web service and injecting an SQL query into a parameter. Successful exploitation of this vulnerabilit...

CVE-2011-2751

SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-2751

SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-2751: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2011-4061

Name of the Vulnerable Software and Affected Versions Parodia versions prior to 6.809 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 6.809, update to version 6.809 or later to resolve the issue...

CVE-2011-0549

SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

Sql injection

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Sql injection

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4809

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4812

Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL commands via the 1 tids parameter to ajaxadmin.php and the 2 msgids parameter to ajaxmember.php...

CVE-2010-4814

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4809

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4814

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4809

CVE-2010-4809 concerns a SQL injection in DBSite 1.0, specifically in index.php where the ID parameter can be manipulated to execute arbitrary SQL commands. The vulnerability is evidenced across multiple sources (NVD, CVE lists) and indicates remote exploitation potential with no authentication r...

PT-2011-1758

Name of the Vulnerable Software and Affected Versions 6kbbs version 8.0 build 20100901 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the tids parameter to "ajaxadmin.php" and the msgids parameter to "ajaxmember.php". Recommendations For...

A Really Simple Chat Multiple SQL Injection Vulnerabilities

A Really Simple Chat is prone to multiple SQL injection vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2181

Multiple SQL injection vulnerabilities in A Really Simple Chat ARSC 3.3-rc2 allow remote attackers to execute arbitrary SQL commands via the 1 arscuser parameter to base/admin/edituser.php, 2 arsclayoutid parameter in base/admin/editlayout.php, or 3 arscroom parameter to base/admin/editroom.php...

PT-2011-3668

Name of the Vulnerable Software and Affected Versions A Really Simple Chat ARSC version 3.3-rc2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the arsc user parameter to "base/admin/edit user.php", the arsc layout id parameter in...