sql injection vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter....

Cacti

7.5

CVSSv2

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter....

Cacti

7.5

CVSSv2

SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors....

Mantis

5

CVSSv2

Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users....

Mantis

7.5

CVSSv2

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter....

Mantis

7.2

CVSSv2

Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors....

Mantis

4

CVSSv2

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072....

Theforeman Katello

7.5

CVSSv2

SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the (1) Data Set...

Dashbuilder Project Dashbuilder Redhat Jboss Bpm Suite Jboss Enterprise Brms Platform

10

CVSSv2

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name....

Proftpd Project Proftpd1 EDB exploit available

7.5

CVSSv2

SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signature_bbcode_uid parameter, which is not properly initialized....

Phpbb Group Phpbb

« PREV 1 2 3 4 5 6 7 NEXT »