Sql injection

SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq52515...

PT-2015-4807

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager version 8.14 Description A SQL injection issue in the Image Management component allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Unified Communications...

CVE-2015-0684: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq52515...

CVE-2015-2679

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php or 2 username parameter to gxadmin/login.php...

Sql injection

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php or 2 username parameter to gxadmin/login.php...

CVE-2015-2679: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php or 2 username parameter to gxadmin/login.php...

Sql injection

SQL injection vulnerability in client-edit.php in ProjectSend formerly cFTP r561 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to users-edit.php...

PT-2015-5779

Name of the Vulnerable Software and Affected Versions Vastal I-Tech phpVID versions 0.9.9 through 1.2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the order by parameter in the groups.php file. Recommendations For versions 0.9.9 through...

CVE-2015-2563: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 0.9.9 and 1.2.3 allows remote attackers to execute arbitrary SQL commands via the orderby parameter. NOTE: The cat parameter vector is already covered by CVE-2008-4157...

CVE-2015-2314

SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer header in a wp-link-ajax action to comments/feed...

Sql injection

SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer header in a wp-link-ajax action to comments/feed...

PT-2015-5698

Name of the Vulnerable Software and Affected Versions WordPress SEO by Yoast plugin versions 1.5.7 and earlier, 1.6.x before 1.6.4, 1.7.x before 1.7.4 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the order by or order parameter in the "wpseo...

WordPress Pods Plugin <= 2.5.1.1 - Blind SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

CVE-2015-2237

Multiple SQL injection vulnerabilities in Betster aka PHP Betoffice 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 showprofile.php or 2 categoryedit.php or 3 username parameter in a login to index.php...

CVE-2015-2237

Multiple SQL injection vulnerabilities in Betster aka PHP Betoffice 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 showprofile.php or 2 categoryedit.php or 3 username parameter in a login to index.php...

Sql injection

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-0524

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-4688

Name of the Vulnerable Software and Affected Versions EMC Secure Remote Services Virtual Edition ESRS VE versions 3.02 through 3.03 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 3.02 and 3.03, update to a version that contains a fix...

CVE-2015-0524: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1875

SQL injection vulnerability in a2billing/customer/iridiumthreed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter...