13422 matches found
Sql injection
Multiple SQL injection vulnerabilities in Valid tiny-erp 1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to 1 partnerlist.php, 2 proioncategorylist.php, 3 rantevoulist.php, 4 syncategorylist.php, 5 synallasomenoslist.php, 6...
CVE-2011-4673
SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2011-4671
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter aka redirect URL...
CVE-2011-4674
SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to execute arbitrary SQL commands via the onlyhostid parameter...
PT-2011-5020
Name of the Vulnerable Software and Affected Versions Jetpack plugin for WordPress affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the modules/sharedaddy.php file. Recommendations At the moment, there is no...
CVE-2011-4674: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to execute arbitrary SQL commands via the onlyhostid parameter...
CVE-2011-4672: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Valid tiny-erp 1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to 1 partnerlist.php, 2 proioncategorylist.php, 3 rantevoulist.php, 4 syncategorylist.php, 5 synallasomenoslist.php, 6...
Sql injection
SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a...
Sql injection
SQL injection vulnerability in the Time Returns comtimereturns component 2.0 and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a timereturns action to index.php...
Sql injection
SQL injection vulnerability in the Estate Agent comestateagent component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showEO action to index.php...
CVE-2011-4569
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...
PT-2011-4998
Name of the Vulnerable Software and Affected Versions Joomla! component Time Returns com timereturns versions 2.0 and possibly earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a timereturns action to...
Sql injection
SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the onlyforuser parameter in an index action to index.php...
PT-2011-4987
Name of the Vulnerable Software and Affected Versions vTiger CRM versions 5.2.1 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the onlyforuser parameter in an index action to the "index.php" endpoint. Recommendations For...
CVE-2011-4349
Multiple SQL injection vulnerabilities in 1 cd-mapping-db.c and 2 cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and a device id, b property, or c profile id...
CVE-2010-5049
SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the navtime parameter...
CVE-2010-5055
SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5059
SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action...