Joomla Hbooking Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Hbooking component. An attacker can exploit the vulnerability to access or modify database data...

Joomla JE Form Creator Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE Form Creator component, which can be exploited by attackers to access or modify database data...

Joomla JE auction component SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE auction component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Sponsor Wall Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. SQL injection vulnerability in Joomla Sponsor Wall component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Vik Booking Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Vik Booking component. An attacker can exploit the vulnerability to access or modify database data...

Joomla JE Classify Ads Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE Classify Ads component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Sports Predictions Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Sports Predictions component. An attacker can exploit the vulnerability to access or modify database data...

Joomla onisPetitions Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla onisPetitions component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Music Collection Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Music Collection component. An attacker can exploit the vulnerability to access or modify database data...

Joomla JE Directory Ads Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. The Joomla JE Directory Ads component SQL injection vulnerability can be exploited by attackers to access or modify database data...

Joomla Soccer Bet Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Soccer Bet component. An attacker can exploit the vulnerability to access or modify database data...

Itech B2B Script SQL Injection Vulnerability (CNVD-2017-01850)

B2B Script v4.29 is a versatile WEB solution for those who want to quickly publish their B2B portals in minutes. A SQL injection vulnerability exists in the 'token' in the catcompany.php page in B2B Script v4.29, which can be exploited by an attacker to obtain sensitive information from the...

CVE-2016-8566

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database...

CVE-2016-8567

An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP...

Format string

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database...

CVE-2016-8566

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database...

Vik Booking Component SQL Injection Vulnerability in Joomla!

Joomla! is a globally recognized content management system. vik Booking is a functional plugin based on Joomla! A SQL injection vulnerability exists in the Vik Booking component of Joomla! that can be exploited by attackers to access or modify database data...

CVE-2016-8954

IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database...

Zoneminder 1.29/1.30 - Cross-Site Scripting / SQL Injection / Session Fixation / Cross-Site Request Forgery

Source: https://www.foxmole.com/advisories/foxmole-2016-07-05.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 === FOXMOLE - Security Advisory 2016-07-05 === Zoneminder multiple vulnerabilities Affected Versions ================= Zoneminder 1.29,1.30 Issue Overview ============== Vulnerability...

CVE-2017-5218

A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3. The APDocumentUI.asp web resource includes Utilityfuncs.js when the file is opened or viewed. This file crafts a SQL statement to identify the database that is to be in use with the current user's session. The database variable c...