Sql injection

SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary SQL commands via the new password...

CVE-2013-7355

CVE-2013-7355 : The Red Hat, NVD and related records describe a SQL injection vulnerability in SAP BI Universal Data Integration . It allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with the issue tied to the J2EE schema . The available sources do not provide ex...

CVE-2014-2708

Multiple SQL injection vulnerabilities in graphxport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the 1 graphstart, 2 graphend, 3 graphheight, 4 graphwidth, 5 graphnolegend, 6 printsource, 7 localgraphid, or 8 rraid parameter...

PT-2014-3386

Name of the Vulnerable Software and Affected Versions SAP BI Universal Data Integration affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the J2EE schema. Recommendations At the moment, there is no...

CVE-2014-1455: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary SQL commands via the new password...

CVE-2012-6643

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures aka afsignatures plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands via the 1 afstype, 2 afsbackground, 3 afsshowonline, 4 afsbarleft, 5 afsbarcenter, 6 afsfullline1, 7 afsfullline...

Sql injection

SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin aka afsignatures 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afsbarright parameter...

CVE-2012-6643

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

CVE-2013-0735

Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to execute arbitrary SQL commands via the id parameter in a viewtopic 1 removepost, 2 sticky, or 3 closed action or 4 thread parameter in a postreply action to...

CVE-2014-2655

SQL injection vulnerability in the genshowstatus function in functions.inc.php in Postfix Admin aka postfixadmin before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias...

CVE-2014-2655

SQL injection vulnerability in the genshowstatus function in functions.inc.php in Postfix Admin aka postfixadmin before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias...

CVE-2014-2655

SQL injection vulnerability in the genshowstatus function in functions.inc.php in Postfix Admin aka postfixadmin before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias...

Sql injection

SQL injection vulnerability in the genshowstatus function in functions.inc.php in Postfix Admin aka postfixadmin before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias...

CVE-2013-3213

Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQL commands via the 1 picklistname parameter in the getpicklists method to soap/customerportal.php, 2 where parameter in the getticketslist method to soap/customerportal.php, or 3...

CVE-2013-2945

SQL injection vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote authenticated administrators to execute arbitrary SQL commands via the showstatuses parameter. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL command...

CVE-2013-3213

Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQL commands via the 1 picklistname parameter in the getpicklists method to soap/customerportal.php, 2 where parameter in the getticketslist method to soap/customerportal.php, or 3...

CVE-2014-2655

SQL injection vulnerability in the genshowstatus function in functions.inc.php in Postfix Admin aka postfixadmin before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias...

PT-2014-2641

Name of the Vulnerable Software and Affected Versions b2evolution versions prior to 4.1.7 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands via the show statuses parameter in the "blogs/admin.php" endpoint. This can be leveraged using CSRF to enabl...