Sql injection

SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-6488

CVE-2015-6488 : A cross-site scripting (XSS) vulnerability exists in the web server of Rockwell Automation’s Allen‑Bradley MicroLogix PLCs. Affected devices are MicroLogix 1100 (Series B and earlier firmware) and MicroLogix 1400 (Series B and earlier firmware). The issue allows remote attackers t...

CVE-2015-6486

CVE-2015-6486 describes an SQL injection in Rockwell Automation’s MicroLogix 1100 and 1400 PLCs. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Affected products: MicroLogix 1100 (hardware Series B, firmware 14.000 and earlier; mitig...

CVE-2015-6491

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors...