PT-2011-2441

Name of the Vulnerable Software and Affected Versions Symantec IM Manager versions prior to 8.4.18 Description A SQL injection issue in the management console allows remote attackers to execute arbitrary SQL commands. Recommendations For Symantec IM Manager versions prior to 8.4.18, update to...

CVE-2011-3688

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...

CVE-2011-3688

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...

CVE-2010-4851

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the 1 ref or 2 pollid parameter to index.php, or the 3 country parameter to createaccount.php...

CVE-2010-4849

SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the esid parameter...

CVE-2010-4844

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

Sql injection

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the 1 ref or 2 pollid parameter to index.php, or the 3 country parameter to createaccount.php...

Sql injection

SQL injection vulnerability in admin/login.php in MHP DownloadScript aka MH Products Download Center 2.2 allows remote attackers to execute arbitrary SQL commands via the Name parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter...

Sql injection

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

Sql injection

SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the esid parameter...

Sql injection

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

CVE-2010-4842

SQL injection vulnerability in admin/login.php in MHP DownloadScript aka MH Products Download Center 2.2 allows remote attackers to execute arbitrary SQL commands via the Name parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4844

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

CVE-2010-4849

SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the esid parameter...

CVE-2011-3688: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...

CVE-2010-4847: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewitem.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

PT-2011-1782

Name of the Vulnerable Software and Affected Versions MHP Downloadshop affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the ItemID parameter in the view item.php file. This can lead to unauthorized access and manipulation of...

Sql injection

SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-1913

SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...