CVE-2014-8663: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8664: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Product Safety EHS-SAF component in SAP Environment, Health, and Safety Management allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8588

SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-7176

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...

CVE-2014-8586

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...

Sql injection

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...

Sql injection

Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 columnfilter or 2 category parameter to system/index.php or the 3 tblsort0 parameter in the comment module to system/index.php...

Sql injection

SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...

Sql injection

SQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ch parameter...

CVE-2014-7176

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...

CVE-2014-8588

CVE-2014-8588 describes a SQL injection in SAP HANA metadata.xsjs (vulnerable in SAP HANA 1.00.60.379371). Remote attackers could execute arbitrary SQL commands via unspecified vectors. The NVD entry and multiple feeds confirm this CVE ID and vulnerability class; affected software is SAP HANA, co...

PT-2014-8635

Name of the Vulnerable Software and Affected Versions SAP HANA version 1.00.60.379371 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. Recommendations For SAP HANA version 1.00.60.379371, at the moment, there is no information about a newer...

PT-2014-6444

Name of the Vulnerable Software and Affected Versions EllisLab ExpressionEngine versions prior to 2.9.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the column filter or category parameter to "system/index.php" or the tbl sort...

CVE-2014-3366

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted response, aka Bug ID CSCup88089...

CVE-2014-3446

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

Sql injection

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

CVE-2014-3446

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

Sql injection

SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via the userid parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php...

CVE-2014-3828

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 fixed in Centreon web 2.5.3 allow remote attackers to execute arbitrary SQL commands via 1 the indexid parameter to views/graphs/common/makeXMLListMetrics.php, 2 the sid parameter to...