13422 matches found
PT-2012-2469
Name of the Vulnerable Software and Affected Versions Symantec Altiris WISE Package Studio versions prior to 8.0MR1 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 8.0MR1, update to version 8.0MR1 or later to resolve the issue...
CVE-2012-0293: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Symantec Altiris WISE Package Studio before 8.0MR1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-1557
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU2, 9.x before 9.5 MU11, 10.0.x before MU13, 10.1.x before MU22, 10.2.x before MU16, and 10.3.x before MU5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU2, 9.x before 9.5 MU11, 10.0.x before MU13, 10.1.x before MU22, 10.2.x before MU16, and 10.3.x before MU5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-1557
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU2, 9.x before 9.5 MU11, 10.0.x before MU13, 10.1.x before MU22, 10.2.x before MU16, and 10.3.x before MU5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2012-3344
Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel versions 7.x through 8.x before 8.6 MU2 Parallels Plesk Panel versions 9.x before 9.5 MU11 Parallels Plesk Panel versions 10.0.x before MU13 Parallels Plesk Panel versions 10.1.x before MU22 Parallels Plesk Panel versions...
CVE-2012-1557: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU2, 9.x before 9.5 MU11, 10.0.x before MU13, 10.1.x before MU22, 10.2.x before MU16, and 10.3.x before MU5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2012-2880
Name of the Vulnerable Software and Affected Versions SQLAlchemy versions prior to 0.7.0b4 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the limit or offset keyword to the select function. Additionally, unspecified vectors to the...
Sql injection
Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via 1 a SOAP message to the Printer.getPrinterAgentKey function in the SoapServlet servlet, 2 the User.updateUserValue functio...
CVE-2011-4487
SQL injection vulnerability in Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allows remote attacke...
CVE-2011-4487
SQL injection vulnerability in Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allows remote attacke...
CVE-2011-4487: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allows remote attacke...
CVE-2012-1210
SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2012-0999
SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...
Sql injection
SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...
CVE-2012-1294
SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
CVE-2012-1294
SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
Joomla Dtregister SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Official Website: http://www.1337day.com 0 1 + Support...
CVE-2012-1234
SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a malformed URL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0234...