injection vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in loginscript.php in e-ticketing allows remote malicious users to execute arbitrary SQL commands via the password parameter.

Ola Lasisi E-ticketing -

1 EDB exploit

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote malicious users to execute arbitrary SQL commands via the order_by parameter.

Hulihanapplications Hulihan Bxr 0.6.8

1 EDB exploit

Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla! allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter in a showItem action and (2) cid parameter in a show action to index.php.

Blueconstantmedia Com Djcatalog

1 EDB exploit

SQL injection vulnerability in Piwigo prior to 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.

1 EDB exploit

Multiple SQL injection vulnerabilities in Gespage prior to 7.4.9 allow remote malicious users to execute arbitrary SQL commands via the (1) show_prn parameter to webapp/users/prnow.jsp or show_month parameter to (2) webapp/users/blhistory.jsp or (3) webapp/users/prhistory.jsp.

Gespage Gespage

1 EDB exploit

Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote malicious users to execute arbitrary SQL commands via the (1) email parameter to login.php; the (2) season_id parameter to themes/flixer/ajax/load_season.php; the (3) movie_id parameter to themes/flixer/ajax/get_ra...

Muvikoscript Muviko 1.1

1 EDB exploit

Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/WapPushManager.java in the WAPPushManager module in Android prior to 5.0.0 allow remote malicious users to execute arbitrary SQL commands, and consequently launch ...

Google Android Google Android 1.0 Google Android 1.1 Google Android 1.5 Google Android 1.6 Google Android 2.0 Google Android 2.0.1 Google Android 2.1 Google Android 2.2 Google Android 2.2.1 Google Android 2.2.2 Google Android 2.2.3

1 EDB exploit

SQL injection vulnerability in modules/rss/rss.php in Cotonti prior to 0.9.14 allows remote malicious users to execute arbitrary SQL commands via the "c" parameter to index.php.

Cotonti Cotonti Siena Cotonti Cotonti Siena 0.9.0 Cotonti Cotonti Siena 0.9.1 Cotonti Cotonti Siena 0.9.2 Cotonti Cotonti Siena 0.9.3 Cotonti Cotonti Siena 0.9.4 Cotonti Cotonti Siena 0.9.5 Cotonti Cotonti Siena 0.9.6 Cotonti Cotonti Siena 0.9.7 Cotonti Cotonti Siena 0.9.8 Cotonti Cotonti Siena 0.9.9 Cotonti Cotonti Siena 0.9.10

1 EDB exploit

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote malicious user to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding.

Glpi-project Glpi 0.90.4

1 EDB exploit

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and previous versions allow remote malicious users to execute arbitrary SQL commands via the id parameter in a (1) get or (2) set action to rate.php.

Freereprintables Articlefr

1 EDB exploit

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook