13422 matches found
CVE-2012-3468
CVE-2012-3468 affects the Ushahidi Platform prior to 2.5. The vulnerability tier is high (CVSS v2 base score 7.5) and stems from multiple SQL injection weaknesses in specific code paths: (1) verify() in application/controllers/alerts.php, (2) save_all() in application/models/settings.php, and (3)...
CVE-2012-4070
SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL commands via the oid parameter in a homepage action to index.php...
Sql injection
SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitrary SQL commands via the delete parameter to the editattributes page...
Sql injection
Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the 1 username parameter to the send page, 2 email parameter to the forget page, 3 password parameter to the forumarchive page, 4 section parameter to the management page, 5...
CVE-2012-3953
SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitrary SQL commands via the delete parameter to the editattributes page...
CVE-2012-4034
Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the 1 username parameter to the send page, 2 email parameter to the forget page, 3 password parameter to the forumarchive page, 4 section parameter to the management page, 5...
CVE-2012-4034: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the 1 username parameter to the send page, 2 email parameter to the forget page, 3 password parameter to the forumarchive page, 4 section parameter to the management page, 5...
CVE-2012-4034
PBBoard 2.1.4 (and likely earlier) is affected by multiple SQL injection vulnerabilities disclosed for CVE-2012-4034. The flaws arise from unsanitised input in various POST/GET parameters processed by index.php (including username, email, password, section, section_id, member_id, and subjectid) t...
CVE-2012-3470: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in application/libraries/api/MYCountriesApiObject.php in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to getcountries functions...
PT-2012-4500
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.2.0.3 through 10.2.0.5 Oracle Database Server versions 11.1.0.7 Oracle Database Server versions 11.2.0.2 through 11.2.0.3 Description The issue allows remote authenticated users to execute arbitrary SQL...
CVE-2012-4178
SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...
Sql injection
SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...
CVE-2012-4178
SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...
CVE-2012-3951
CVE-2012-3951 concerns the MySQL component in Plixer Scrutinizer (also Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier, which ships with a default password for two accounts ( Scrutinizer and ScrutRemote). This default credentialing flaw enables remote attackers to log into MySQL over a TCP se...
PT-2012-5081
Name of the Vulnerable Software and Affected Versions Plixer Scrutinizer versions 9.0.1.19899 and earlier Description The issue concerns a default password set to admin for the scrutinizer and scrutremote accounts in the MySQL component. This allows remote attackers to execute arbitrary SQL...
Sql injection
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter...
CVE-2012-4061
Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to diaryview.asp or 2 viewdate parameter to default.asp...
CVE-2012-4056
SQL injection vulnerability in index2.php in Uiga Personal Portal allows remote attackers to execute arbitrary SQL commands via the p parameter...