PT-2013-2529

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Information Server WIS versions 4.0 SP1 through 5.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Invensys Wonderware Information Server WIS versions 4.0 SP...

CVE-2013-0684: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Invensys Wonderware Information Server WIS 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execute arbitrary SQL commands via 1 nedi/html/System-Export.php, 2 nedi/html/Devices-List.php, or 3 the Noma component...

Sql injection

SQL injection vulnerability in Cisco Network Admission Control NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095...

CVE-2013-1177

SQL injection vulnerability in Cisco Network Admission Control NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095...

Sql injection

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 edit.php or 2 import.php. NOTE: the view.php id vector is already covered by CVE-2008-2565.1 and the edit.php id vector is already covered by...

CVE-2013-1748

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 edit.php or 2 import.php. NOTE: the view.php id vector is already covered by CVE-2008-2565.1 and the edit.php id vector is already covered by...

CVE-2013-1748

CVE-2013-1748 corresponds to multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 . The issues allow remote attackers to execute arbitrary SQL commands through unspecified parameters to edit.php and import.php ; the description notes that the view.php and edit.php vectors are already ...

PT-2013-2945

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC Manager versions prior to 4.8.3.1 Cisco Network Admission Control NAC Manager versions 4.9.x prior to 4.9.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achiev...

CVE-2013-1177: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Network Admission Control NAC Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095...

PT-2013-3219

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.2 through 11.2.0.3 Description The issue affects the availability of the system and allows remote attackers to bypass security restrictions, execute arbitrary SQL commands, and gain access to sensitive da...

Sql injection

SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to product...

PT-2013-4123

Name of the Vulnerable Software and Affected Versions ZAPms versions 1.41 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the pid parameter to the product. Recommendations For ZAPms versions 1.41 and earlier, avoid using the pid...

CVE-2013-3050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to product...

Server: contacts: SQL Injection

ownCloud before 5.0.1 does not neutralize special elements that are passed to the SQL query in addressbookprovider.php which therefore allows an authenticated attacker to execute arbitrary SQL commands. For more information please consult the official advisory. This advisory is licensed CC BY-SA ...

PT-2013-2931

Name of the Vulnerable Software and Affected Versions Cisco Connected Grid Network Management System CG-NMS affected versions not specified Description The issue concerns multiple SQL injection vulnerabilities in the device-management implementation. These vulnerabilities allow remote attackers t...

CVE-2013-1163: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746...

Sql injection

Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters...

PT-2013-2396

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Enterprise versions 5.6 and 8.x before 8.7 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is due to multiple SQL injection vulnerabilities. Recommendations For IBM Security...

CVE-2013-0511: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters...