CVE-2012-5292

Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 gallerye.php, 2 pageE.php, or 3 pageH.php...

Sql injection

Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 index.php or 2 gallery.php...

Sql injection

SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5289

Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 index.php or 2 gallery.php...

CVE-2012-5290

CVE-2012-5290 affects EasyWebRealEstate. The vulnerability is a SQL injection in two parameters: lstid (listings.php) and infoid (index.php). The underlying issue is unsanitized input allowing remote attackers to manipulate SQL commands. Impact is described as arbitrary SQL execution; no exploita...

CVE-2012-5291

CVE-2012-5291 is a SQL injection vulnerability in the Posse Softball Director CMS, specifically in the file team.php. The underlying issue allows remote attackers to manipulate the idteam parameter to execute arbitrary SQL commands. This has public exploit code and references (e.g., Exploit-DB en...

PT-2012-5893

Name of the Vulnerable Software and Affected Versions MyStore Xpress Tienda Virtual affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the art detalle.php file. Recommendations For MyStore Xpres...

PT-2012-5887

Name of the Vulnerable Software and Affected Versions phpMyDirectory version 1.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the page.php file. Recommendations For phpMyDirectory version 1.3.3, consider restricting...

CVE-2012-1603

Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL commands via the 1 curstr parameter in the findUsers function, 2 id parameter in the isIdAvailable function, or 3 username parameter in the getGreetings function...

Sql injection

Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL commands via the 1 curstr parameter in the findUsers function, 2 id parameter in the isIdAvailable function, or 3 username parameter in the getGreetings function...

CVE-2012-5227

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5227

CVE-2012-5227 affects Peel SHOPPING versions 2.8 and 2.9, where an SQL injection in administrer/tva.php via the id parameter allows remote execution of arbitrary SQL commands. Root cause: insufficient input validation leading to query composition. Affected software: Peel SHOPPING 2.8/2.9; vulnera...

Sql injection

Multiple SQL injection vulnerabilities in the getsamplefiltersbysignature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0, allow remote attackers to execute arbitrary SQL commands via the 1 agent or 2 object id...

CVE-2012-2998

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-4180

Name of the Vulnerable Software and Affected Versions Cumin versions prior to 0.1.5444 Red Hat Enterprise Messaging, Realtime, and Grid MRG version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is due to multiple SQL injection vulnerabilities in the get...

PT-2012-4423

Name of the Vulnerable Software and Affected Versions Trend Micro Control Manager versions prior to 5.5.0.1823 Trend Micro Control Manager version 6.0 before 6.0.0.1449 Description A SQL injection issue exists in the ad hoc query module, allowing remote attackers to execute arbitrary SQL commands...

Sql injection

SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-5162

Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 editcategorypost or 2 enablecategory action to index.php...