EUVD-2015-3055

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2972

Thetis is a Sysphonic Thetis (Thetis groupware) vulnerability (CVE-2015-2972) involving SQL injection (CWE-89) in Thetis before 2.3.0. Affected component: Thetis software; root cause: insecure handling of SQL queries allowing remote attackers to execute arbitrary SQL via unspecified vectors. Impa...

PT-2015-6019

Name of the Vulnerable Software and Affected Versions Sysphonic Thetis versions prior to 2.3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue...

CVE-2015-2972: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...