15350 matches found
PT-2016-7610
Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.1 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. This is achieved via the orderby parameter in the "Site Browser Templates pages" screen. Recommendations For versions...
PT-2016-6926
Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE version 1.30.876 Description A vulnerability in the web framework code could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. Recommendations For Cisco Identity...
dotCMS < 3.3.2 SQLi Vulnerability
dotCMS is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dotcms:dotcms"; if...
Sql injection
A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information:...
CVE-2016-6443
CVE-2016-6443 affects Cisco Prime Infrastructure and Evolved Programmable Network Manager (EPNM) with a SQL database interface vulnerability. The issue is a lack of input validation in SQL queries, allowing an authenticated, remote attacker to execute a subset of arbitrary SQL statements that can...
CVE-2016-6443
A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information:...
PT-2016-6916
Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure and Evolved Programmable Network Manager versions 1.2400, 2.01.0.34A, 3.10.128 Description A vulnerability in the SQL database interface could allow an authenticated, remote attacker to impact system confidentiality ...
Cisco Identity Services Engine SQL Injection Vulnerability (cisco-sa-20161026-ise)
A vulnerability in the web framework code of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
Sql injection
SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-0249: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2016-4113
Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor versions 8.2 before p310 IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 IBM Security Guardium Database Activity Monitor versions 10.x through 10.1 before p10...
Categorizator 0.3.1 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Categorizator 0.3.1 | SQL Injection Date: 03/09/16 Exploit Author: Wad Deek Vendor Homepage: http://lelogiciellibre.net/telecharger/annuaire-web.php Software Link:...
Huge-IT Catalog Extension SQL Injection Vulnerability in Joomla!
Joomla! is an open source content management system CMS developed by the Open Source Matters team in the U.S. Huge-IT Catalog is one of the extensions that showcases products in the most attractive way. A SQL injection vulnerability exists in version 1.0.7 of the Joomla! Huge-IT Catalog extension...
SetucoCMS vulnerable to SQL injection
Overview SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains an SQL injection vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning partnership. Impact An arbitrary...
Sql injection
SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCur25485...
BalkanSys CMS show_pageID SQL injection Vulnerability
Exploit for php platform in category web applications Exploit Title : BalkanSys CMS showpageID SQL injection Exploit Author : xBADGIRL21 Dork : inurl:/?act=showpage or inurl:/?act=showpage "Balkansys" Category: Webapps version: BalkanSys CMS 2.x - 3.x Tested on: Linux | Windows Vendore :...
MuM MapEdit 3.2.6.0 - Multiple Vulnerabilities
Exploit for asp platform in category web applications Security Advisory -- Multiple Vulnerabilities - MuM Map Edit Product Vendor: Mensch und Maschine Software SE / Mensch und Maschine acadGraph GmbH Product: MapEdit Affected software version: 3.2.6.0 MuM MapEdit provides geodata to the internet...
CVE-2016-5843
Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System OTRS allow remote attackers to execute arbitrary SQL commands via crafted search parameters...
PT-2016-6711
Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 2.x through 2.3.5 Open Ticket Request System OTRS versions 4.x through 4.0.4 Open Ticket Request System OTRS versions 5.x through 5.0.4 Description The issue allows remote attackers to execute arbitrary...
