PT-2018-11831

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 7.0.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the country id parameter in the product/card.php file. Recommendations For version 7.0.3, consider restricting...

Sql injection

SQL injection vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote authenticated users to execute arbitrary SQL commands via the filterPattern parameter...

Sql injection

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2018-8964

Name of the Vulnerable Software and Affected Versions Pixelpost versions 1.7.3 and earlier Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations For Pixelpost versions 1.7.3 and earlier, at the moment, there is no information about a newer...

WordPress iThemes Security Plugin SQL Injection (CVE-2018-12636)

A SQL injection vulnerability exists in WordPress iThemes Security Plugin . Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Ek Rishta Component SQL Injection (CVE-2018-12254)

An SQL injection vulnerability exists in Joomla Ek Rishta 2.10. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WordPress iThemes Security Plugin < 7.0.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin iThemes Securitybetter-wp-security = 7.0.2 - Authenticated SQL Injection Exploit Author: Çlirim Emini Website: https://www.sentry.co.com/ Vendor Homepage: https://ithemes.com/ Software Link:...

Sql injection

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2018-10969

SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute arbitrary SQL commands via the invitation codes grid...

Security Bulletin: IBM Tivoli Monitoring TEP Server vulnerabilities

Summary By default, communications between the Tivoli Enterprise Portal client and server are not encrypted which can cause the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-1181 DESCRIPTION: IBM Tivoli Monitoring Portal client could allow a local attacker to gain elevated...

PT-2018-10213

Name of the Vulnerable Software and Affected Versions Pie Register plugin versions prior to 3.0.10 Description The issue allows remote attackers to execute arbitrary SQL commands via the invitation codes grid, potentially leading to unauthorized data access or modification. Recommendations For...

Wecodex Restaurant CMS 'Login' SQL Injection Vulnerability

Wecodex Restaurant CMS is a management system. A SQL injection vulnerability exists in Wecodex Restaurant CMS 'Login', which can be exploited by attackers to execute arbitrary SQL commands...

PT-2018-11227

Name of the Vulnerable Software and Affected Versions RSA Web Threat Detection versions prior to 6.4 Description The issue allows an authenticated malicious user with low privileges to potentially execute SQL commands on the back-end database by supplying specially crafted input data to the...

JVN#27978559: Multiple vulnerabilities in Pixelpost

Pixelpost provided by Pixelpost.org contains multiple vulnerabilities listed below. Arbitrary code execution - CVE-2018-0604 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L| Base Score: 4.7 CVSS v2| AV:N/AC:L/Au:S/C:P/I:P/A:P| Base Score: 6.5 Cross-site...

CVE-2018-10595

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor to issue SQL commands, which may result in loss or corruption of data...

CVE-2018-10593

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor to issue SQL commands, which may result in data...

Sql injection

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor to issue SQL commands, which may result in data...

CVE-2018-10593

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor to issue SQL commands, which may result in data...