PT-2013-2612

Name of the Vulnerable Software and Affected Versions Bugzilla versions prior to 3.6.13 Bugzilla versions 3.7.x Bugzilla versions 4.0.x prior to 4.0.10 Bugzilla versions 4.1.x Bugzilla versions 4.2.x prior to 4.2.5 Bugzilla versions 4.3.x Bugzilla versions 4.4.x prior to 4.4rc2 Description A...

CVE-2013-0785: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in showbug.cgi in Bugzilla before 3.6.13, 3.7.x and 4.0.x before 4.0.10, 4.1.x and 4.2.x before 4.2.5, and 4.3.x and 4.4.x before 4.4rc2 allows remote attackers to inject arbitrary web script or HTML via the id parameter in conjunction with an invalid value ...

PT-2013-1474

Name of the Vulnerable Software and Affected Versions OrangeHRM versions prior to 2.6.11.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter. Recommendations For versions prior to 2.6.11.2, update to version 2.6.11.2 or later to...

CVE-2011-5259: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lib/controllers/CentralController.php in OrangeHRM before 2.6.11.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...

PT-2013-3149 · WordPress +1 · Wp-Table Reloaded

Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...

CVE-2013-1463: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...

Sql injection

SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-6525

SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-6524

SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-6524

SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-6525: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2013-1988

Name of the Vulnerable Software and Affected Versions pGB version 2.12 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the kommentar.php file. Recommendations For pGB version 2.12, consider restricting access to the kommentar.php...

PT-2013-1989

Name of the Vulnerable Software and Affected Versions PHPBridges affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the members.php file. Recommendations At the moment, there is no information...

PT-2013-1381

Name of the Vulnerable Software and Affected Versions webConductor affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the default.php file. Recommendations At the moment, there is no information...

CVE-2010-5287: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-6524: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in mods/hours/data/gethours.php in PHP Volunteer Management 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-6521

Cross-site scripting XSS vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions...

PT-2013-1985

Name of the Vulnerable Software and Affected Versions Elefant CMS version 1.2.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the id parameter to the "admin/versions" endpoint...