Sql injection

Multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute arbitrary SQL commands via the 1 reqclass parameter to editrequestenduser.asp; the 2 sysrequestid parameter to editrequestuser.asp; the 3 sysrequestid parameter to enduseractions.asp; the 4 sysrequest...

CVE-2012-4971: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute arbitrary SQL commands via the 1 reqclass parameter to editrequestenduser.asp; the 2 sysrequestid parameter to editrequestuser.asp; the 3 sysrequestid parameter to enduseractions.asp; the 4 sysrequest...

PT-2012-5696

Name of the Vulnerable Software and Affected Versions Layton Helpbox version 4.4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via various parameters, including reqclass, sys request id, confirm, searchsql, back, status, sys userpwd, sql,...

CVE-2012-5367

Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbitrary SQL commands via the sortField parameter to 1 viewCustomers, 2 viewPayGrades, or 3 viewSystemUsers in symfony/web/index.php/admin/, as demonstrated using cross-site reques...

Sql injection

Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbitrary SQL commands via the sortField parameter to 1 viewCustomers, 2 viewPayGrades, or 3 viewSystemUsers in symfony/web/index.php/admin/, as demonstrated using cross-site reques...

Sql injection

SQL injection vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-5550

SQL injection vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-5367

Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbitrary SQL commands via the sortField parameter to 1 viewCustomers, 2 viewPayGrades, or 3 viewSystemUsers in symfony/web/index.php/admin/, as demonstrated using cross-site reques...

CVE-2012-5550: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-6020

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x through 7.x Description A SQL injection issue in the Time Spent module for Drupal allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 6.x through 7.x, update the Time Spent module to a...

CVE-2012-4479

SQL injection vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-5427

Name of the Vulnerable Software and Affected Versions Drag & Drop Gallery module versions 6.x Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Drag & Drop Gallery module version 6.x, update to a version that includes a fix for this issue...

CVE-2012-4479: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-5385

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions prior to 5.5.29 MariaDB versions 5.1.x through 5.1.62 MariaDB versions 5.2.x through 5.2.12 MariaDB versions 5.3.x through 5.3.7 MariaDB versions 5.5.x through 5.5.25 Description Multiple SQL injection vulnerabilities in...

CVE-2012-6039

SQL injection vulnerability in viewcomments.php in YABSoft Advanced Image Hosting AIH Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter...

CVE-2012-6039: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewcomments.php in YABSoft Advanced Image Hosting AIH Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter...

CVE-2012-2086

SQL injection vulnerability in the getlastconversationlines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter...

Sql injection

SQL injection vulnerability in the getlastconversationlines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter...

CVE-2012-2086

CVE-2012-2086: A SQL injection vulnerability exists in Gajim’s get_last_conversation_lines (common/logger.py) prior to 0.15, allowing remote attackers to execute arbitrary SQL commands through the jig parameter. This is documented across multiple sources (OSV/OSVDB/NVD mirrors and Gentoo GLSA ref...