PT-2012-5540

Name of the Vulnerable Software and Affected Versions NeoInvoice affected versions not specified Description The issue is related to a SQL injection vulnerability in the application/controllers/invoice.php file. This vulnerability might allow remote attackers to execute arbitrary SQL commands via...

CVE-2012-4673: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute arbitrary SQL commands via vectors involving the sortcol variable in the listitems function, a different vulnerability than CVE-2012-3477...

CVE-2009-2097: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki Catalog aka Smart Catalog allows remote attackers to execute arbitrary SQL commands via the searchtext parameter. NOTE: some of these details are obtained from third party information...