CVE-2013-5321

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...

PT-2013-5482

Name of the Vulnerable Software and Affected Versions CoolURI extension versions prior to 1.0.30 for TYPO3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For CoolURI extension versions prior to 1.0.30, update to version 1.0.30 or later to resolve...

CVE-2013-5322: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5321: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...

CVE-2013-5311

CVE-2013-5311: Affected software is Vastal I-Tech phpVID 1.2.3. The vulnerability is SQL injection via the n parameter in browse_videos.php and members.php (cat parameter noted as covered by CVE-2008-4157). Impact is remote SQL command execution as described in the public records. Connected docum...

CVE-2013-5304

SQL injection vulnerability in the Store Locator locator extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Browser - TYPO3 without PHP browser extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Store Locator locator extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5470

Name of the Vulnerable Software and Affected Versions TYPO3 DB Integration wfqbe extension versions prior to 2.0.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve...

PT-2013-5466

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 4.5.5 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 4.5.5, update to version 4.5.5 or later to resolve the issue...

PT-2013-5462

Name of the Vulnerable Software and Affected Versions TYPO3 ke search extension versions prior to 1.4.1 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issue...

PT-2013-5464

Name of the Vulnerable Software and Affected Versions TYPO3 Store Locator locator extension versions prior to 3.1.5 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 3.1.5, update to version 3.1.5 or later to resolve the issue...

CVE-2013-5306: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Browser - TYPO3 without PHP browser extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5310: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DB Integration wfqbe extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in PHPFox before 3.6.0 build4 allows remote attackers to execute arbitrary SQL commands via the searchgender parameter to user/browse/view/...

Sql injection

SQL injection vulnerability in PHPFox before 3.6.0 build6 allows remote attackers to execute arbitrary SQL commands via the searchsortby parameter to user/browse/view/...

Sql injection

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php...

CVE-2013-4879

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php...

CVE-2013-4879: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php...

CVE-2013-4619

Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 start or 2 end parameter to interface/reports/customreportrange.php, or the 3 formnewid parameter to custom/charttracker.php...