CVE-2012-1294

SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Sql injection

SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2012-1294: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

PT-2012-3182

Name of the Vulnerable Software and Affected Versions CONTIMEX Impulsio CMS affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the "index.php" endpoint. Recommendations At...

CVE-2012-1210

SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-3133

Name of the Vulnerable Software and Affected Versions pFile version 1.02 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the /file.php endpoint. Recommendations For version 1.02, avoid using the id parameter in the /file.php...

CVE-2012-1210: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-1067

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

Sql injection

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2012-1067

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2012-1067: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

PT-2012-3055

Name of the Vulnerable Software and Affected Versions WP-RecentComments plugin version 2.0.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in an rc-content action to "index.php". Recommendations For WP-RecentComments plugin...

Sql injection

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

CVE-2012-0983: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

PT-2012-2989

Name of the Vulnerable Software and Affected Versions Ez Album affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to "index.php". This is a SQL injection vulnerability. Recommendations At the moment...

CVE-2011-5072

Multiple SQL injection vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to portal/kb.php; 2 contractid parameter to contractaddservice.php; 3 id parameter to editescalationpath.php; 4 unlock, 5 lock...

Sql injection

SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal DZCP 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php...

PT-2012-2940

Name of the Vulnerable Software and Affected Versions deV!L'z Clanportal DZCP version 1.5.5 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in a showkat action to the "index.php" endpoint. Recommendatio...

CVE-2012-0906: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal DZCP 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php...

DEBIAN-CVE-2012-0030

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified projectid URI parameter...