CVE-2015-4454

SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...

Sql injection

SQL injection vulnerability in mod1/index.php in the Akronymmanager sbakronymmanager extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...

Sql injection

SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id...

CVE-2015-2803

SQL injection vulnerability in mod1/index.php in the Akronymmanager sbakronymmanager extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter...

CVE-2015-4342

SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id...

CVE-2015-4188

Cisco Prime Collaboration Manager SQL Injection (CVE-2015-4188) affects the Manager interface of Cisco Prime Collaboration 10.5(1). A lack of input validation on user-supplied input in SQL queries allows remote attackers to craft URLs to execute arbitrary SQL commands, potentially exposing or man...

PT-2015-6447

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration version 10.51 Description A SQL injection issue in the Manager interface allows remote attackers to execute arbitrary SQL commands via a crafted URL. Recommendations For Cisco Prime Collaboration version 10.51, update...

CVE-2015-4188: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.51 allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug IDs CSCuu29910, CSCuu29928, and CSCuu59104...

PT-2015-6525

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.8d Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 0.8.8d, update to version 0.8.8d or later to resolve the issue...

CVE-2015-4613

SQL injection vulnerability in the backend module in the Developer Log devlog extension before 2.11.4 for TYPO3 allows remote editors to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4611

SQL injection vulnerability in the Smoelenboek ncgovsmoelenboek extension before 1.0.9 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4609

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the "FAQ - Frequently Asked Questions" jsfaq extension before 1.2.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Smoelenboek ncgovsmoelenboek extension before 1.0.9 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Store Locator locator extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4612

SQL injection vulnerability in the "FAQ - Frequently Asked Questions" jsfaq extension before 1.2.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4611

SQL injection vulnerability in the Smoelenboek ncgovsmoelenboek extension before 1.0.9 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4613

SQL injection vulnerability in the backend module in the Developer Log devlog extension before 2.11.4 for TYPO3 allows remote editors to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4611

SQL injection vulnerability in the Smoelenboek ncgovsmoelenboek extension before 1.0.9 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...