13559 matches found
Sql injection
SQL injection vulnerability in the RSDDCVERCOUNTTABCOLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-7094
CVE-2013-7094 : A SQL injection vulnerability exists in the RSDDCVER_COUNT_TAB_COLS function of SAP NetWeaver 7.30. Remote attackers can potentially execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the affected product/version and vulnerable component; no ex...
CVE-2013-6839
SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby parameter to catalog/id...
CVE-2013-6985
SQL injection vulnerability in mworklog/logsearchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to execute arbitrary SQL commands via the thisday parameter...
Sql injection
Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 fbuserid or 2 twuserid parameter to signup...
Sql injection
SQL injection vulnerability in mworklog/logsearchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to execute arbitrary SQL commands via the thisday parameter...
Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities
Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID: ==================================...
CVE-2013-6341
SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to index.php...
Sql injection
SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to index.php...
CVE-2013-6341
SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to index.php...
Sql injection
SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
WordPress Plugin CiviCRM '_value' Parameter SQL Injection Vulnerability
CiviCRM is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress";...
CVE-2013-5957
Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote attackers to execute arbitrary SQL commands via the value parameter to 1 ajax/jqState or 2 ajax/jqcounty...
Chamilo LMS 1.9.6 SQL Injection Vulnerability
Chamilo LMS version 1.9.6 suffers from a remote SQL injection vulnerability. Vendor: Chamilo Association Vulnerable Versions: 1.9.6 and probably prior Tested Version: 1.9.6 Advisory Publication: November 6, 2013 without technical details Vendor Notification: November 6, 2013 Vendor Patch: Novembe...
CVE-2013-6875
SQL injection vulnerability in functions/prependadm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php...
CVE-2013-6873
SQL injection vulnerability in Testa Online Test Management System OTMS 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the testid parameter...
Sql injection
SQL injection vulnerability in Testa Online Test Management System OTMS 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the testid parameter...
Sql injection
SQL injection vulnerability in functions/prependadm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php...
CVE-2013-6873
SQL injection vulnerability in Testa Online Test Management System OTMS 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the testid parameter...
CVE-2013-6875
SQL injection vulnerability in functions/prependadm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php...