Sql injection

SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-2956

MilkyStep by Igreks MilkyStep Light v0.94 and earlier and MilkyStep Professional v1.82 and earlier contain a SQL injection (CWE-89) vulnerability that enables remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected products include MilkyStep Light Ver0.94 and earlier ...

CVE-2015-2956: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6004

Name of the Vulnerable Software and Affected Versions Igreks MilkyStep Light versions 0.94 and earlier Igreks MilkyStep Professional versions 1.82 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Igreks MilkyStep Light versions 0.94...

CVE-2015-4109

Multiple SQL injection vulnerabilities in the ratings module in the Users Ultra plugin before 1.5.16 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 datatarget or 2 datavote parameter in a ratingvote wpajaxnoprivratingvote action to wp-admin/admin-ajax.php...

PT-2015-6416

Name of the Vulnerable Software and Affected Versions Users Ultra plugin versions prior to 1.5.16 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the data target or data vote parameter in a rating vote wp ajax nopriv rating vote action to...

CVE-2015-2999

CVE-2015-2999: SysAid Help Desk prior to 15.2 contains multiple SQL injection vulnerabilities. The injected vectors include (1) groupFilter in AssetDetails via /genericreport, (2) customSQL in TopAdministratorsByAverageTimer and (3) ActiveRequests via /genericreport, (4) dir parameter to HelpDesk...

CVE-2015-4160

SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes: 2152278...

CVE-2015-4159

SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes 2153892...

CVE-2015-4160

CVE-2015-4160 describes a SQL injection vulnerability in the SAP ASE Database Platform. A remote attacker could exploit unspecified vectors to execute arbitrary SQL commands, potentially viewing, adding, modifying, or deleting data. The entry references SAP Security Notes: 2152278. The NVD score ...

CVE-2015-4159

The CVE-2015-4159 entry concerns SAP HANA Web-based Development Workbench with an SQL injection vulnerability. The affected component is the Web-based Development Workbench in SAP HANA, where remote attackers can submit specially crafted SQL commands to manipulate or obtain data. The root cause i...

CVE-2015-4159: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes 2153892...

PT-2015-6439

Name of the Vulnerable Software and Affected Versions SAP HANA Web-based Development Workbench affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version...

PT-2015-6440

Name of the Vulnerable Software and Affected Versions SAP ASE Database Platform affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version that contains a...

CVE-2015-4160: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes: 2152278...

CVE-2015-0753

SQL injection vulnerability in Cisco Unified Email Interaction Manager EIM and Unified Web Interaction Manager WIM 9.02 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028...

Sql injection

SQL injection vulnerability in Cisco Unified Email Interaction Manager EIM and Unified Web Interaction Manager WIM 9.02 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028...

Sql injection

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter...

CVE-2015-4137

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter...

PT-2015-6427

Name of the Vulnerable Software and Affected Versions Milw0rm Clone Script version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the related.php file via the program parameter. Recommendations F...