PT-2012-3489

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7, 11.2.0.2, and 11.2.0.3 Enterprise Manager Grid Control EM Base Platform version 10.2.0.5 Enterprise Manager Grid Control EM Base Platform version 11.1.0.1 EM Plugin for DB version 12.1.0.1 EM Plugin fo...

Sql injection

SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header...

CVE-2012-3998

Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the 1 paste id in admin/modules/modpastes.php or 2 show.php, 3 user id to admin/modules/modusers.php, 4 project to list.php, or 5 session id to show.php...

CVE-2012-3881

Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 95.php, 2 view.php, or 3 rtg.php...

PT-2012-5126

Name of the Vulnerable Software and Affected Versions Sticky Notes versions prior to 0.2.27052012.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the paste id in "admin/modules/mod pastes.php" or "show.php",...

CVE-2012-3998: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the 1 paste id in admin/modules/modpastes.php or 2 show.php, 3 user id to admin/modules/modusers.php, 4 project to list.php, or 5 session id to show.php...

CVE-2012-3839

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

CVE-2012-3834

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

Sql injection

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

Sql injection

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

CVE-2012-3839

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

BizShop SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Sql injection

SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote authenticated users to execute arbitrary SQL commands via the selectedModuleOnly parameter in a stateviewmodulelog action ...

CVE-2012-3791

Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 itemdelete.php, 2 itemstatus.php, 3 itemdetail.php, 4 itemmodify.php, or 5 itemposition.php in admin/; or 6 status parameter to...

Sql injection

Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 itemdelete.php, 2 itemstatus.php, 3 itemdetail.php, 4 itemmodify.php, or 5 itemposition.php in admin/; or 6 status parameter to...

CVE-2012-2718

SQL injection vulnerability in the Counter module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "recording visits."...

Sql injection

SQL injection vulnerability in the Counter module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "recording visits."...

CVE-2012-2718

SQL injection vulnerability in the Counter module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "recording visits."...

CVE-2012-2718

CVE-2012-2718 affects the contributed Drupal Counter module (all versions). The root cause is insufficient filtering of user-supplied text when recording visits, allowing a remote attacker to inject SQL commands via that data. Impact is arbitrary SQL execution through the Counter module’s visit-r...

Sql injection

SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...