4 matches found
Sql injection
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter...
CVE-2014-10038
The CVE-2014-10038 entry details an SQL injection vulnerability in agenda/indexdate.php affecting DomPHP 0.83 and earlier. The issue allows remote attackers to execute arbitrary SQL commands via the ids parameter. This is the explicit impact stated in multiple sources; no remediation steps are de...
PT-2015-3682
Name of the Vulnerable Software and Affected Versions DomPHP versions 0.83 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the ids parameter in the "agenda/indexdate.php" file. Recommendations For DomPHP versions 0.83 and earlier, update...
CVE-2014-10038: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter...