535 matches found
CVE-2016-8903
SQL injection vulnerability in the "Site Browser Templates pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...
CVE-2016-8904
SQL injection vulnerability in the "Site Browser Containers pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...
CVE-2016-8907
SQL injection vulnerability in the "Content Types Content Types" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...
CVE-2016-8906
SQL injection vulnerability in the "Site Browser Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...
4Images SQL Injection Vulnerability
4images is a web-based image gallery management system. An SQL injection vulnerability exists in the orderby parameter of the validateimages.php page in 4Images 1.7.13 and prior versions, which can be exploited by an attacker to compromise an application, access or modify data, or exploit a...
CVE-2016-8904: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the "Site Browser Containers pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...
CVE-2016-8907: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the "Content Types Content Types" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...
CVE-2016-8906: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the "Site Browser Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...
CVE-2016-8903: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the "Site Browser Templates pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter...
PT-2016-7611
Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.1 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. This is achieved via the orderby parameter in the "Site Browser Containers pages" screen. Recommendations For version...
PT-2016-7614
Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.1 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. This is achieved via the orderby parameter in the "Content Types Content Types" screen. Recommendations For versions...
PT-2016-7613
Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.3.1 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. This is achieved via the orderby parameter in the "Site Browser Links pages" screen. Recommendations For versions pri...
DotCMS SQL Injection Vulnerability (CNVD-2016-11002)
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in the Site BrowserTemplates pages screen in versions of DotCMS prior to...
DotCMS SQL Injection Vulnerability (CNVD-2016-11005)
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in the Site Browser Links page screen in versions of DotCMS prior to 3.3.1...
DotCMS SQL Injection Vulnerability (CNVD-2016-11007)
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in the Site BrowserHTML pages screen in versions of DotCMS prior to 3.3.1....
DotCMS SQL Injection Vulnerability (CNVD-2016-11003)
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in the Site BrowserContainers pages screen in versions of DotCMS prior to...
PHPBack SQL Injection Vulnerability
PHPback is an open source web application feedback system that provides users with feedback on issues and suggestions to help improve the site. A SQL injection vulnerability exists in the 'orderby' parameter in PHPBack version 3.0. Allow attackers to exploit the vulnerability to modify the conten...
PHPback 'orderby' parameter SQL injection vulnerability
PHPback is an open source web application feedback system that provides users with feedback on issues and suggestions to help improve the site. A SQL injection vulnerability exists in PHPback version 1.3.0. An attacker can exploit the vulnerability by constructing a SQL statement containing the...
DotCMS Workflow Screen SQL Injection Vulnerability
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in Workflow Screen in DotCMS versions prior to 3.3.2. A remote attacker ca...
