9 matches found
EUVD-2005-0787
Malware in sbrugna...
SUSE CVE-2009-5031
ModSecurity before 2.5.11 treats request parameter values containing single quotes as files, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting XSS attacks via a single quote in a request parameter in the Content-Disposition field of a...
CVE-2014-5185
SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quoteform.php page to wp-admin/edit.php...
PT-2014-6324
Name of the Vulnerable Software and Affected Versions Quartz plugin version 1.01.1 for WordPress Description The issue allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands. This is achieved by exploiting the quote parameter in an edit action in the...
CVE-2014-5185: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quoteform.php page to wp-admin/edit.php...
YABB SE 1.5 Quote Parameter SQL Injection Vulnerability
No description provided by source...
CVE-2009-3259: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in RASH Quote Management System RQMS 1.2.2 allow remote attackers to execute arbitrary SQL commands via 1 the search parameter in a search action, 2 the quote parameter in a quote addition, or 3 a UserName cookie in unspecified administrative actions. NOTE:...
CVE-2005-0786: Undefined Security Weakness
SQL injection vulnerability in gbnew.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php...
CVE-2004-0291: Undefined Security Weakness
SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter...