13422 matches found
CVE-2011-2403
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-2703
CVE-2011-2703 describes multiple SQL injection vulnerabilities in MapServer prior to 4.10.7, 5.x prior to 5.6.7, and 6.x prior to 6.0.1. Attack vectors relate to OGC filter encoding and WMS time support, enabling remote attackers to execute arbitrary SQL commands. Impact is partial confidentialit...
PT-2011-4034
Name of the Vulnerable Software and Affected Versions MapServer versions prior to 4.10.7 MapServer versions 5.x prior to 5.6.7 MapServer versions 6.x prior to 6.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved through vectors related to 1 O...
PT-2011-3831
Name of the Vulnerable Software and Affected Versions HP Network Automation versions 7.2x through 7.6x HP Network Automation versions 9.0 through 9.10 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For HP Network Automation versions 7.2x...
CVE-2011-2546
SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...
Sql injection
SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...
CVE-2011-2546
SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...
Sql injection
SQL injection vulnerability in mysql/mysql-auth.pl in the modauthnzexternal module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field...
CVE-2011-2546: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...
PT-2011-3925
Name of the Vulnerable Software and Affected Versions Cisco SA 500 series security appliances versions prior to 2.1.19 Description A SQL injection issue exists in the web-based management interface, allowing remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to...
CVE-2011-2467
SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-2467
SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-2467
SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-2467: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors...
PT-2011-3891
Name of the Vulnerable Software and Affected Versions Lsass versions 5.4 through 6.1 Likewise Enterprise version 6.0 Description A SQL injection issue in lsassd in Lsass in the Likewise Security Authority allows local users to execute arbitrary SQL commands. Recommendations For Lsass versions 5.4...
PT-2011-2671
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.1.0.5 through 10.2.0.3 Oracle Enterprise Manager Grid Control version 10.1.0.6 Description The issue affects the confidentiality, integrity, and availability of the system, allowing remote attackers to bypass...
Cisco Unified Communications Manager Multiple SQL Injections (CVE-2011-1610)
Multiple SQL injection vulnerabilities have been reported in Cisco Unified Communications Manager. A remote attacker can exploit these vulnerabilities by sending a malicious request to the target web service and injecting an SQL query into a parameter. Successful exploitation of this vulnerabilit...
CVE-2011-2751
SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-2751
SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2011-4061
Name of the Vulnerable Software and Affected Versions Parodia versions prior to 6.809 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 6.809, update to version 6.809 or later to resolve the issue...