Sql injection

The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The userlistbackend.php...

CVE-2017-9463

The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The userlistbackend.php...

CVE-2017-9463

The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The userlistbackend.php...

PT-2017-18936

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.9.0 Description The issue allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The user list backend.php component is...

CVE-2017-9463: Improper Neutralization of Special Elements used in an SQL Command

The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The userlistbackend.php...

PT-2015-3678

Name of the Vulnerable Software and Affected Versions couponPHP versions prior to 1.2.0 Description The issue concerns SQL injection vulnerabilities in the admin area. These vulnerabilities allow remote administrators to execute arbitrary SQL commands. The vulnerabilities are specifically related...

CVE-2014-10034: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the 1 iDisplayLength or 2 iDisplayStart parameter to a commentspaginate.php or b storespaginate.php in admin/ajax/...

PT-2014-5490

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.20 Description The issue allows remote attackers to execute arbitrary SQL commands via several parameters, including the login parameter in send pw by email or generate new password actions, iDisplayStart and...