CVE-2017-2133

SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB10004.47 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2017-15198

Name of the Vulnerable Software and Affected Versions Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000 4.47 Description The issue allows authenticated attackers to execute arbitrary SQL commands. This can be done via unspecified vectors, potentially leading to...

CVE-2017-2133: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB10004.47 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field...

CVE-2015-5376

SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field...

Sql injection

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the slcustomfield parameter to sl-xml.php...

Sql injection

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters...

CVE-2015-2146

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to project.php, the 2 groupid parameter to group.php, the 3 statusid parameter to status.php, the 4 resolutionid parameter to...

CVE-2015-2147

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters...

CVE-2015-2147

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters...

CVE-2015-2146

Issuetracker phpBugTracker is affected by SQL injection vulnerabilities in versions before 1.7.0. Multiple parameters (id in project.php; group_id in group.php; status_id in status.php; resolution_id in resolution.php; severity_id in severity.php; priority_id in priority.php; os_id in os.php; sit...

CVE-2015-2147: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters...

CVE-2017-1000120

ERPNextFrappe Version = 7.1.27 SQL injection vulnerability in frappe.share.getusers allows remote authenticated users to execute arbitrary SQL commands via the fields parameter...

CVE-2017-1000120

ERPNextFrappe Version = 7.1.27 SQL injection vulnerability in frappe.share.getusers allows remote authenticated users to execute arbitrary SQL commands via the fields parameter...

CVE-2017-1000120

ERPNextFrappe Version = 7.1.27 SQL injection vulnerability in frappe.share.getusers allows remote authenticated users to execute arbitrary SQL commands via the fields parameter...

Sql injection

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

CVE-2017-6089

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

CVE-2017-6089

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

phpCollab 2.5.1 - SQL Injection

phpCollab 2.5.1 - SQL Injection CVE-2017-6089 PhpCollab 2.5.1 Multiple SQL Injections unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. SQL injections The phpCollab code does not correctly filter arguments,...

Sql injection

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 timeline parameter in contenttimelineclass.php; or the id parameter to 2 pages/contenttimelineedit.php or 3 pages/contenttimelineindex.php...