CVE-2014-3514

activerecord/lib/activerecord/relation/querymethods.rb in Active Record in Ruby on Rails 4.0.x before 4.0.9 and 4.1.x before 4.1.5 allows remote attackers to bypass the strong parameters protection mechanism via crafted input to an application that makes createwith calls...

ArticleFR - 'id' SQL Injection

source: https://www.securityfocus.com/bid/69307/info ArticleFR is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, ...

UBUNTU-CVE-2014-3478

Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service application crash via a crafted Pascal string in a FILEPSTRING conversion...

Discuz <= 7.2 SQL injection vulnerability details-vulnerability warning-the black bar safety net

Is said to be a digital company of the emergency response to the release out. The group inside the small partners are shocked, the specific vulnerability analysis see this article Wherein the In the senior PHP application vulnerability auditing techniques of1an article in the"magic quotes brought...

ownCloud 'calid' Parameter privilege Escalation Vulnerability

ownCloud is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if...

Excuse Online - 'pwd.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29370/info Excuse Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Marwel 2.7 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15959/info Marwel is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...

ODFaq 2.1 FAQ.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15958/info ODFaq is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result...

1WebCalendar 4.0 mainCal.cfm SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17193/info 1WebCalendar is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploi...

MzK Blog Katgoster.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24909/info MzK Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Basic Analysis And Security Engine 1.2 Base_qry_main.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15199/info Basic Analysis And Security Engine is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

SaphpLesson 2.0 Print.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17239/info SaphpLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could all...

1-2-3 Music Store 1.0 Process.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15544/info 1-2-3 Music Store is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

ESMI PayPal Storefront 1.7 pages.php idpages Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/12903/info ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query. Successful...

Article Publisher 1.0.1 Pro Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/17595/info Article Publisher Pro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successf...

O2PHP Oxygen 1.0/1.1 Post.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17324/info Oxygen is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

Dale Mooney Calendar Events Viewevent.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25456/info Calendar Events is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

VBulletin 1.0.1 lite/2.x/3.0 joinrequests.php request Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14872/info vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitatio...

Web4Future Affiliate Manager PRO 4.1 Functions.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15717/info Affiliate Manager PRO is prone to an SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

ASP Inline Corporate Calendar 3.6.3 Defer.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13485/info ASP Inline Corporate Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...