15310 matches found
Sql injection
SQL injection vulnerability in zeroviewarticle.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
CVE-2014-4034
SQL injection vulnerability in zeroviewarticle.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
CVE-2014-3287
Affected software : Cisco Unified Communications Manager (Cisco Unified CM) – Java interface, specifically the BulkViewFileContentsAction.java. Vulnerability : SQL injection via crafted filename parameters in a URL, leading to arbitrary SQL execution. Impact : Authenticated, remote attacker could...
Sql injection
SQL injection vulnerability in the checkEmailFormat function in plugins/jojocore/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header to /articles/test/...
Sql injection
Multiple SQL injection vulnerabilities in FrontAccounting FA before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-3973: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in FrontAccounting FA before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2014-5646
Name of the Vulnerable Software and Affected Versions FrontAccounting versions prior to 2.3.21 Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations For versions prior to 2.3.21, update to...
CVE-2014-3961
SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an "output CSV" action to pdb-signup/...
CVE-2014-3962
Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to 1 videocat.php or 2 single.php...
Medium: lighttpd
Issue Overview: Multiple directory traversal vulnerabilities in 1 modevhost and 2 modsimplevhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. dot dot in the host name, related to requestcheckhostname. SQL injection vulnerability in modmysqlvhost.c in lighttpd...
Sql injection
SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-3937
SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-3932
SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL commands via unspecified parameters...
Sql injection
SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter...
Sql injection
SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL commands via unspecified parameters...
Sql injection
SQL injection vulnerability in the SubmitNews module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics parameter to modules.php...
CVE-2014-3937: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2014-5617
Name of the Vulnerable Software and Affected Versions Contextual Related Posts plugin versions prior to 1.8.10.2 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.8.10.2, update to version 1.8.10.2 or later to resolve the issu...
WordPress Plugin Participants Database 1.5.4.8 - SQL Injection
Yarubo 1: Arbitrary SQL Execution in Participants Database for Wordpress ========================================================================= Program: Participants Database = 1.5.4.8 Severity: Unauthenticated attacker can fully compromise the Wordpress installation Permalink:...