Lucene search
+L

13419 matches found

CNVD
CNVD
•added 2016/08/04 12:00 a.m.•18 views

Huge-IT Portfolio Gallery manager SQL Injection Vulnerability

Huge-IT Portfolio Gallery manager is Huge-IT team developed an extension plugin for Joomla! in the management and display of photos, videos and so on. A SQL injection vulnerability exists in Huge-IT Portfolio Gallery manager v1.1.5. An attacker can exploit this vulnerability to inject arbitrary S...

7.2CVSS8.1AI score0.02103EPSS
SaveExploits1References1
NVD
NVD
•added 2016/08/01 2:59 a.m.•20 views

CVE-2016-4837

SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

9.8CVSS9.9AI score0.021EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2016/08/01 12:00 a.m.•4 views

PT-2016-6175

Name of the Vulnerable Software and Affected Versions EC-CUBE Seed Coupon plugin versions prior to 1.6 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.6, update to version 1.6 or later to resolve the issue...

9.8CVSS0.021EPSS
SaveExploits0References6
NVD
NVD
•added 2016/07/28 2:02 a.m.•29 views

CVE-2016-4522

SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

9.8CVSS10AI score0.06297EPSS
SaveExploits0References2
Prion
Prion
•added 2016/07/28 2:02 a.m.•26 views

Sql injection

SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS9AI score0.06297EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2016/07/28 12:00 a.m.•4 views

PT-2016-6000

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk EnergyMetrix versions prior to 2.20.00 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.20.00, update to version 2.20.00 or lat...

9.8CVSS0.06297EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/28 12:00 a.m.•7 views

CVE-2016-4522: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

9.8CVSS8.6AI score0.06297EPSS
SaveExploits0References2
Prion
Prion
•added 2016/07/19 10:59 p.m.•24 views

Sql injection

Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the 1 ID or 2 Branch parameter...

4CVSS8.8AI score0.0112EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2016/07/19 10:00 p.m.•35 views

CVE-2016-5653

Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the 1 ID or 2 Branch parameter...

7.3AI score0.0112EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/07/19 12:00 a.m.•4 views

PT-2016-6615

Name of the Vulnerable Software and Affected Versions Misys FusionCapital Opics Plus affected versions not specified Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the ID or Branch parameter. Recommendations At the moment, there is ...

6.5CVSS0.0112EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2016/07/15 4:59 p.m.•13 views

CVE-2016-1446

SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuy83200...

8.8CVSS6.1AI score0.01786EPSS
SaveExploits0References3
Prion
Prion
•added 2016/07/15 4:59 p.m.•30 views

Sql injection

SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuy83200...

6.5CVSS8.5AI score0.01786EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2016/07/15 4:00 p.m.•43 views

CVE-2016-1446

SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuy83200...

8.9AI score0.01786EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2016/07/15 12:00 a.m.•4 views

PT-2016-4794

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 2.6 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco WebEx Meetings Server version 2.6, update to a version that contains a fix...

8.8CVSS0.01786EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/15 12:00 a.m.•6 views

CVE-2016-1446: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuy83200...

8.8CVSS8.3AI score0.01786EPSS
SaveExploits0References2
Prion
Prion
•added 2016/07/06 2:59 p.m.•24 views

Sql injection

SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

5.5CVSS8.5AI score0.00878EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2016/07/06 2:00 p.m.•41 views

CVE-2016-4507

SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.8AI score0.00878EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/06 12:00 a.m.•11 views

CVE-2016-4507: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.4CVSS7.1AI score0.00878EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2016/07/03 1:59 a.m.•22 views

CVE-2016-5703

SQL injection vulnerability in libraries/centralcolumns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query...

9.8CVSS9.8AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2016/07/03 1:59 a.m.•41 views

CVE-2016-5703

SQL injection vulnerability in libraries/centralcolumns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query...

9.8CVSS7.5AI score0.02323EPSS
SaveExploits0References2
Rows per page
Query Builder