CVE-2016-8903

SQL injection vulnerability in the "Site Browser Templates pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-8904

SQL injection vulnerability in the "Site Browser Containers pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-8906

SQL injection vulnerability in the "Site Browser Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-8906

SQL injection vulnerability in the "Site Browser Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-8908

SQL injection vulnerability in the "Site Browser HTML pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-8907

SQL injection vulnerability in the "Content Types Content Types" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-8903

SQL injection vulnerability in the "Site Browser Templates pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

PT-2016-7611

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.1 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. This is achieved via the orderby parameter in the "Site Browser Containers pages" screen. Recommendations For version...

PT-2016-7614

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.1 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. This is achieved via the orderby parameter in the "Content Types Content Types" screen. Recommendations For versions...

CVE-2016-8903: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Site Browser Templates pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

PT-2016-7610

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.1 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. This is achieved via the orderby parameter in the "Site Browser Templates pages" screen. Recommendations For versions...

PT-2016-7615

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.1 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. This is achieved via the orderby parameter in the "Site Browser HTML pages" screen. Recommendations For versions prio...

PT-2016-7613

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.1 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. This is achieved via the orderby parameter in the "Site Browser Links pages" screen. Recommendations For versions pri...

CVE-2016-8908: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Site Browser HTML pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-8906: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Site Browser Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2016-8907: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Content Types Content Types" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

4Images SQL Injection Vulnerability

4images is a web-based image gallery management system. An SQL injection vulnerability exists in the orderby parameter of the validateimages.php page in 4Images 1.7.13 and prior versions, which can be exploited by an attacker to compromise an application, access or modify data, or exploit a...

CVE-2016-8904: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Site Browser Containers pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...

DotCMS SQL Injection Vulnerability (CNVD-2016-11003)

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in the Site BrowserContainers pages screen in versions of DotCMS prior to...

DotCMS SQL Injection Vulnerability (CNVD-2016-11007)

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in the Site BrowserHTML pages screen in versions of DotCMS prior to 3.3.1....