mcart.xls Bitrix Module 6.5.2 - SQL Injection

mcart.xls Bitrix Module 6.5.2 - SQL Injection Advisory ID: HTB23279 Product: mcart.xls Bitrix module Vendor: www.mcart.ru Vulnerable Versions: 6.5.2 and probably prior Tested Version: 6.5.2 Advisory Publication: November 18, 2015 without technical details Vendor Notification: November 18, 2015...

CVE-2015-3947: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

mcart.xls Bitrix Module 6.5.2 - SQL Injection

Advisory ID: HTB23279 Product: mcart.xls Bitrix module Vendor: www.mcart.ru Vulnerable Versions: 6.5.2 and probably prior Tested Version: 6.5.2 Advisory Publication: November 18, 2015 without technical details Vendor Notification: November 18, 2015 Public Disclosure: January 13, 2016 Vulnerabilit...

CVE-2015-8769

SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-8769: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2016-4010

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.4.7 Description A SQL injection issue allows attackers to execute arbitrary SQL commands. Recommendations For versions prior to 3.4.7, update to version 3.4.7 or later to resolve the issue...

CVE-2015-6433

SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...

CVE-2015-6433

CVE-2015-6433 describes an SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225). An authenticated remote user can exploit a crafted URL to execute arbitrary SQL commands on the backend. The issue stems from improper validation of user-supplied input in SQL queries...

PT-2016-1016

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 11.00.98000.225 Description The issue is related to a lack of protection in the SQL query structure, allowing remote authenticated users to execute arbitrary SQL commands via a crafted URL. This can...

CVE-2015-5023

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2016-3658

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management version 6.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For IBM Curam Social Program Management version 6.1, update to version 6.1.1 to resolve...

CVE-2015-5023: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5049

SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2016-3665

Name of the Vulnerable Software and Affected Versions IBM OpenPages GRC Platform versions 7.0 through 7.0.0.4 IF3 IBM OpenPages GRC Platform versions 7.1 through 7.1.0.1 IF5 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5049: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-7607

Name of the Vulnerable Software and Affected Versions EC-CUBE BbAdminViewsControl213 plugin versions prior to 1.1 EC-CUBE BbAdminViewsControl plugin versions prior to 2.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For EC-CUBE...

CVE-2015-7784: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the BOKUBLOCK 1 BbAdminViewsControl213 plugin before 1.1 and 2 BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 searchcolumn or 2 switch parameter...