11862 matches found
CVE-2014-3857
Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control formerly WinRoute Firewall before 8.3.2 allow remote authenticated users to execute arbitrary SQL commands via the 1 x16 or 2 x17 parameter to print.php...
CVE-2014-3482 rubygem-activerecord: SQL injection vulnerability in 'bitstring' quoting
SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresqladapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leveraging improper bitstring quoting. It was...
WordPress Mz-jajak plugin <= 2.1 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Mz-jajak plugin = 2.1 SQL Injection Vulnerability Date: 2012-08-10 Author: StRoNiX E-mail: [email protected] Software Link: http://downloads.wordpress.org/plugin/mz-jajak.zip Version: 2.1 tested --------------- PoC POST data...
Mambo Component Ricette 1.0 - Remote SQL Injection Vulnerability
No description provided by source. joomla SQL Injectioncomricette AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comricette DORK 2 : allinurl: comricetteid EXPLOIT :...
Joomla JE Directory Component SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : joomla JE Directory = SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 30.09.2010 +Script : joomla JE Directory +Demo :...
Joomla Component com_job (showMoreUse) SQL injection vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '67141' ssvid version = '1.0' author = 'hhxx' vulDate = '2009-12-08' createDate =...
WordPress Zotpress plugin <= 4.4 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Zotpress plugin = 4.4 SQL Injection Vulnerability Date: 2011-09-04 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/zotpress.4.4.zip Version: 4.4 tested Note: magicquotes...
Joomla Component Ignite Gallery 0.8.3 - SQL Injection Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '65822' ssvid version = '1.0' author = 'kikay' vulDate = '2009-02-19' createDate ...
CVE-2014-4649
SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...
Sql injection
SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-6311
SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-4644
SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2014-4644
CVE-2014-4644 (Cacti Superlinks Plugin 1.4-2) : A SQL injection vulnerability exists in the superlinks.php file of the Superlinks plugin for Cacti (version 1.4-2). The vulnerability is triggered via the id parameter, enabling remote attackers to execute arbitrary SQL commands. Public exploit acti...
CVE-2014-1651
SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-1650
SQL injection vulnerability in user.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in user.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-2949
SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...