CVE-2015-4609

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6640

Name of the Vulnerable Software and Affected Versions TYPO3 Developer Log devlog extension versions prior to 2.11.4 Description A SQL injection issue in the backend module of the Developer Log devlog extension for TYPO3 allows remote editors to execute arbitrary SQL commands. Recommendations For...

PT-2015-6638

Name of the Vulnerable Software and Affected Versions TYPO3 extension ncgov smoelenboek versions prior to 1.0.9 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 1.0.9, update to version 1.0.9 or later to resolve the...

CVE-2015-4609: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6637

Name of the Vulnerable Software and Affected Versions TYPO3 Store Locator locator extension versions prior to 3.3.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 3.3.1, update to version 3.3.1 or later to resolve t...

CVE-2015-4610: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Store Locator locator extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4348

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4348

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6530

Name of the Vulnerable Software and Affected Versions Drupal Spider Contacts module affected versions not specified Description A SQL injection issue in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to...

CVE-2015-2956

SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2956

MilkyStep by Igreks MilkyStep Light v0.94 and earlier and MilkyStep Professional v1.82 and earlier contain a SQL injection (CWE-89) vulnerability that enables remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected products include MilkyStep Light Ver0.94 and earlier ...

CVE-2015-2956: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6004

Name of the Vulnerable Software and Affected Versions Igreks MilkyStep Light versions 0.94 and earlier Igreks MilkyStep Professional versions 1.82 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Igreks MilkyStep Light versions 0.94...

CVE-2015-4109

Multiple SQL injection vulnerabilities in the ratings module in the Users Ultra plugin before 1.5.16 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 datatarget or 2 datavote parameter in a ratingvote wpajaxnoprivratingvote action to wp-admin/admin-ajax.php...

PT-2015-6416

Name of the Vulnerable Software and Affected Versions Users Ultra plugin versions prior to 1.5.16 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the data target or data vote parameter in a rating vote wp ajax nopriv rating vote action to...

CVE-2015-2999

CVE-2015-2999: SysAid Help Desk prior to 15.2 contains multiple SQL injection vulnerabilities. The injected vectors include (1) groupFilter in AssetDetails via /genericreport, (2) customSQL in TopAdministratorsByAverageTimer and (3) ActiveRequests via /genericreport, (4) dir parameter to HelpDesk...

CVE-2015-4160

SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes: 2152278...

CVE-2015-4160

CVE-2015-4160 describes a SQL injection vulnerability in the SAP ASE Database Platform. A remote attacker could exploit unspecified vectors to execute arbitrary SQL commands, potentially viewing, adding, modifying, or deleting data. The entry references SAP Security Notes: 2152278. The NVD score ...