24 matches found
CVE-2012-2998: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2012-4423
Name of the Vulnerable Software and Affected Versions Trend Micro Control Manager versions prior to 5.5.0.1823 Trend Micro Control Manager version 6.0 before 6.0.0.1449 Description A SQL injection issue exists in the ad hoc query module, allowing remote attackers to execute arbitrary SQL commands...
CVE-2005-3980
SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter...
CVE-2005-3980: Undefined Security Weakness
SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter...