CVE-2014-5097

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 get or 2 set action to rate.php...

Sql injection

Multiple SQL injection vulnerabilities in Bank Soft Systems BSS RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the 1 CARDS or 2 XACTION parameter...

PT-2014-5730

Name of the Vulnerable Software and Affected Versions Bank Soft Systems BSS RBS BS-Client version 3.17.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the CARDS or XACTION parameter. Recommendations For Bank Soft Systems BSS RBS BS-Client...

CVE-2014-5262: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the graph settings script graphsettings.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4197: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Bank Soft Systems BSS RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the 1 CARDS or 2 XACTION parameter...

CVE-2014-5159

SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the wsdata parameter...

Sql injection

SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the wsdata parameter...

Sql injection

SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-5383

SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-5159

SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the wsdata parameter...

PT-2014-6440

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 4.7.0 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 4.7.0, update to version 4.7.0 or later to resolve the issue...

CVE-2014-5159: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the wsdata parameter...

CVE-2014-3906

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-3906

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-3906

OSK Advance-Flow 4.41 and earlier, including Advance-Flow Forms 4.41 and earlier, are affected by CVE-2014-3906 due to a SQL injection vulnerability. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially enabling access to or modification of data...

CVE-2014-3906: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-5595

Name of the Vulnerable Software and Affected Versions OSK Advance-Flow versions 4.41 and earlier OSK Advance-Flow Forms versions 4.41 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For OSK Advance-Flow versions 4.41 and earlier, update...

Sql injection

SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to...

CVE-2014-3904

SQL injection vulnerability in lib/admin.php in tenfourzero Shutter 0.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...