CVE-2019-5996

SQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2019-17926

Name of the Vulnerable Software and Affected Versions Video Insight VMS versions 7.3.2.5 and earlier Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations For versions 7.3.2.5 and earlier, update to a version later than 7.3.2.5 to resolve t...

CVE-2019-5996: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2019-17921

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.10.3 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations For versions 4.0.0 through 4.10.3, update to a version that contains a fix for this issu...

CVE-2019-5991: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

SQL Injection

librenms/librenms is vulnerable to SQL injection. A remote attacker is able to inject and execute arbitrary SQL statements via the searchPhrase parameter in ajaxtable.php...

SUSE SLES12 Security Update : postgresql94 (SUSE-SU-2019:2158-1)

This update for postgresql94 fixes the following issues : Security issue fixed : CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner bsc1145092. Note that Tenable Network Security has extracted the preceding description blo...

CVE-2019-13191

A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search/Refine/Set page...

PT-2019-13180

Name of the Vulnerable Software and Affected Versions IntraMaps MapControl version 8 Description A SQL injection issue allows attackers to execute arbitrary SQL commands via the "ApplicationEngine/Search/Refine/Set" page. Recommendations For IntraMaps MapControl version 8, consider restricting...

CVE-2019-13191: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search/Refine/Set page...

openSUSE: Security Advisory for postgresql10 (openSUSE-SU-2019:2062-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-11363

A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...

CVE-2019-11363

A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...

CVE-2019-14314

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...

SQL Injection

GORM is vulnerable to sql injection attacks. The attacks are possible because the library does not properly check for incomplete parentheses, allowing remote attackers to inject and execute arbitrary SQL...

CVE-2019-14314: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...

Joomla FireBoard 1.1.3 SQL Injection

Exploit Title : Joomla 1.5.26 ComFireBoard Components 1.1.3 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/08/2019 Vendor Homepage : fireboard.bestofjoomla.com Software Information Link : infosolutionsgoa.com/cms/fireboard-forum-joomla.html...

WordPress booking-calendar-contact-form plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress booking-calendar-contact-form plugin. An attacker can...

SUSE SLES12 Security Update : postgresql96 (SUSE-SU-2019:2159-1)

This update for postgresql96 fixes the following issues : Security issue fixed : CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner bsc1145092. Note that Tenable Network Security has extracted the preceding description blo...

PT-2019-5824

Name of the Vulnerable Software and Affected Versions YouPHPTube versions 7.2 and earlier Description The issue is related to a lack of protection against SQL query structure exploitation in the plugin/Audit/Objects/AuditTable.php component of YouPHPTube. This allows a remote attacker to execute...