13420 matches found
Sql injection
SQL injection vulnerability in views/zerotransactuser.php in the administrative backend in ZeroCMS 1.3.3, 1.3.2, and earlier allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in a Modify Account action. NOTE: The articleid parameter to zeroviewarticle.ph...
Sql injection
Multiple SQL injection vulnerabilities in FancyFon FAMOC before 3.17.4 allow 1 remote attackers to execute arbitrary SQL commands via the device ID REST parameter PATHINFO to /ajax.php or 2 remote authenticated users to execute arbitrary SQL commands via the order parameter to index.php...
CVE-2015-1513
SQL injection vulnerability in SIPhone Enterprise PBX allows remote attackers to execute arbitrary SQL commands via the Username...
PT-2015-5290
Name of the Vulnerable Software and Affected Versions ZeroCMS versions 1.3.3, 1.3.2, and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the user id parameter in a Modify Account action. Recommendations For ZeroCMS versions...
Redaxscript < 2.3.0 SQLi Vulnerability
Redaxscript is prone to an SQL injection SQLi vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
CVE-2015-1479
SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus SDP before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter...
CVE-2015-1477
SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewad task to classifieds/offerring-ads...
Sql injection
SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus SDP before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter...
CVE-2015-1476
Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the 1 productbycat parameter to product.php, or 2 username or 3 password parameter to admin/index.php...
Sql injection
SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter...
Sql injection
SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in Piwigo before 2.5.6, 2.6.x before 2.6.5, and 2.7.x before 2.7.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-1441
CVE-2015-1441 is a SQL injection vulnerability affecting Piwigo prior to 2.5.6, 2.6.x prior to 2.6.5, and 2.7.x prior to 2.7.3. The description provides no specifics on the attack vectors or exploited parameters, only that remote attackers can execute arbitrary SQL commands. Public references ind...
CVE-2015-1400
SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter...
CVE-2015-1441: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Piwigo before 2.5.6, 2.6.x before 2.6.5, and 2.7.x before 2.7.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2015-5271
Name of the Vulnerable Software and Affected Versions TYPO3 Content Rating Extbase extension versions 2.0.3 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 2.0.3 and earlier, update to a version later than 2.0.3...
CVE-2015-1403: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-1405: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2015-5289
Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.5.6 Piwigo versions 2.6.x prior to 2.6.5 Piwigo versions 2.7.x prior to 2.7.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.5.6, update to...