13420 matches found
PT-2014-6324
Name of the Vulnerable Software and Affected Versions Quartz plugin version 1.01.1 for WordPress Description The issue allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands. This is achieved by exploiting the quote parameter in an edit action in the...
PT-2014-6272
Name of the Vulnerable Software and Affected Versions Status2k affected versions not specified Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the admin/options/logs.php file via th...
WordPress StripShow Plugin <= 2.5.2 - SQL Injection
Because of this vulnerability in the stripshow-storylines page, remote authenticated administrators can execute arbitrary SQL commands in an edit action to wp-admin/admin.php via the "story" parameter. Solution Update the plugin...
PT-2014-6322
Name of the Vulnerable Software and Affected Versions Simple Retail Menus plugin versions prior to 4.1 Description The issue allows remote authenticated editors to execute arbitrary SQL commands. This is achieved by exploiting the targetmenu parameter in an edit action to the "wp-admin/admin.php"...
PT-2014-6325
Name of the Vulnerable Software and Affected Versions All Video Gallery plugin version 1.2 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the id parameter in an edit action in the "allvideogallery videos" page to...
ArticleFR 11.06.2014 (data.php) - Privilege Escalation
No description provided by source. Advisory ID: HTB23219 Product: ArticleFR Vendor: Free Reprintables Vulnerable Versions: 11.06.2014 and probably prior Tested Version: 11.06.2014 Advisory Publication: June 11, 2014 without technical details Vendor Notification: June 11, 2014 Public Disclosure:...
Sql injection
SQL injection vulnerability in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-3055: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2014-5049
Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 8.0.0.1 CF12 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. Recommendations For IBM WebSphere Portal versions 7.x through 8.0.0.1 CF12, update to...
CVE-2014-5104
Multiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 acountry parameter in a process action to affiliatesignup.php, 2 affiliatebannerid parameter to affiliateshowbanner.php, 3 country parameter in a process action to...
Sql injection
SQL injection vulnerability in maint/modules/endpointcfg/endpointgeneric.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action...
CVE-2014-5109
SQL injection vulnerability in maint/modules/endpointcfg/endpointgeneric.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action...
CVE-2014-5104
Multiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 acountry parameter in a process action to affiliatesignup.php, 2 affiliatebannerid parameter to affiliateshowbanner.php, 3 country parameter in a process action to...
CVE-2014-4858
Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password field...
CVE-2014-3326: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCup26957...
PT-2014-5220
Name of the Vulnerable Software and Affected Versions Cisco Security Manager versions 4.5 through 4.6 Description A SQL injection issue in the web framework of Cisco Security Manager allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Security Manager...
Sql injection
SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteriastartswith parameter to ajax/render/memberlistitems...
PT-2014-6279
Name of the Vulnerable Software and Affected Versions vBulletin versions 5.0.4 through 5.1.3 Alpha 5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the criteriastartswith parameter to the "ajax/render/memberlist items" endpoint. Recommendatio...