359 matches found
Sql injection
SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php...
CVE-2015-4713
SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php...
CVE-2015-4713
Affected software: ApPHP Hotel Site 3.x.x. Vulnerability: SQL injection via the pid parameter to index.php, enabling arbitrary SQL commands to be executed by remote attackers. Root cause (as stated): Insufficient input filtering/validation of the pid parameter, permitting crafted input to alter S...
CVE-2015-4713: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php...
PT-2015-6675
Name of the Vulnerable Software and Affected Versions ApPHP Hotel Site versions 3.x.x Description The issue allows remote editors to execute arbitrary SQL commands. This is achieved via the pid parameter to the "index.php" endpoint. Recommendations For ApPHP Hotel Site versions 3.x.x, avoid using...
Infinite Automation Systems Mango Automation Cross-Site Scripting Vulnerability
Infinite Automation Systems Mango Automation is an open source SCADA/HMI software application from Infinite Automation Systems in Australia that provides real-time logging of data from sensors, PLCs, databases, generates logs and reports, sends alarms and other functions. A cross-site scripting...
CVE-2013-3050
SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to product...
CVE-2013-3050: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to product...
PT-2013-4123
Name of the Vulnerable Software and Affected Versions ZAPms versions 1.41 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the pid parameter to the product. Recommendations For ZAPms versions 1.41 and earlier, avoid using the pid...
CVE-2012-5334
SQL injection vulnerability in productdesc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2012-5334
SQL injection vulnerability in productdesc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2012-5334: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in productdesc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter...
Sql injection
SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2012-1002: Undefined Security Weakness
SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2010-5009
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action...
CVE-2010-5009
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action...
CVE-2010-5009
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action...
PT-2011-1944
Name of the Vulnerable Software and Affected Versions UTStats versions Beta 4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the pid parameter in a "matchp" action in the index.php file. Recommendations For versions Beta 4 and...
CVE-2010-5009: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action...