CVE-2015-6486: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-7903: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

ManageEngine Applications Manager CommonAPIUtil moveSubGroup haid tohaid SQL Injection

An SQL injection vulnerability exists in ManageEngine Applications Manager. This vulnerability is due to insufficient validation of the haid and tohaid parameters when processing requests using the moveSubGroup method of the CommonAPIUtil class. By sending crafted request messages, a remote...

Sql injection

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality and integrity via vectors related to SQL Extensions. NOTE: the previous information is from t...

PT-2015-7513

Name of the Vulnerable Software and Affected Versions K2 blackpearl version 4.6.7 K2 smartforms version 4.6.7 K2 for SharePoint version 4.6.7 Description The issue allows remote attackers to execute arbitrary SQL commands via the xml parameter in the Runtime/Runtime/AjaxCall.ashx file. This can b...

PT-2015-7652

Name of the Vulnerable Software and Affected Versions Drupal 7 driver for SQL Server and SQL Azure versions prior to 7.x-1.4 Description The issue arises from the escapeLike function in sqlsrv/database.inc, which fails to properly escape certain characters. This allows remote attackers to execute...

PT-2015-2523

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, 12.2.4 Description The issue affects the confidentiality and integrity of the system, potentially allowing remote authenticated users to execute arbitrary SQL commands via a...

CVE-2015-7682

Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the 1 selectinvitaioncodebulkoption or 2 invidelid parameter in the pie-invitation-codes page to...

Sql injection

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticated users to execute arbitrary SQL commands via the 1 remoteSourceName in the dropCredentials function or unspecified vectors in the 2 setTraceLevelsForXsApps...

Sql injection

SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...

Sql injection

SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074...

CVE-2015-6331

SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...

PT-2015-7183

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning versions 10.6 through 11.0 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Prime Collaboration Provisioning versions 10.6...

CVE-2015-6329: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074...

PT-2015-7185

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance version 10.51 Description A SQL injection issue in the web framework allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Prime Collaboration Assurance version 10.51...

CVE-2015-5659

SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5659

SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5659: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-7019

Name of the Vulnerable Software and Affected Versions Network Applied Communication Laboratory Pref Shimane CMS versions 2.x before 2.0.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions 2.x before 2.0.1, update to version 2.0...