15508 matches found
CVE-2015-1310
SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2015-1310: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
PT-2015-5202
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise Sybase ASE affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The estimated number of potentially affected devices and details about...
Sql injection
SQL injection vulnerability in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request...
PT-2015-3876
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7 through 11.2.0.4 Oracle Database Server versions 12.1.0.1 through 12.1.0.2 Description The issue affects confidentiality, integrity, and availability. It may be related to a stack-based buffer overflow ...
MyBB 1.8.x < 1.8.2 Multiple Vulnerabilities
Binary data 8618.prm...
Sql injection
SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine CFME 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API request to an SQL filter...
PT-2015-5042
Name of the Vulnerable Software and Affected Versions Photo Gallery plugin version 1.2.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the order by parameter in a GalleryBox action to the "/wp-admin/admin-ajax.php" API endpoint...
CVE-2014-9560
SQL injection vulnerability in redirlastpostlist.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter...
Sql injection
SQL injection vulnerability in redirlastpostlist.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter...
CVE-2014-9560
SQL injection vulnerability in redirlastpostlist.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter...
CVE-2014-10038
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter...
CVE-2014-10032
SQL injection vulnerability in newspopup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
CVE-2014-100012
SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter...
Sql injection
Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the 1 iDisplayLength or 2 iDisplayStart parameter to a commentspaginate.php or b storespaginate.php in admin/ajax/...
Sql injection
SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter...
Sql injection
SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter to wp-admin/edit.php...
Sql injection
Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...