sql injection vulnerabilities and exploits

7.2

CVSSv2

Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors....

Mantis

5

CVSSv2

Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users....

Mantis

7.5

CVSSv2

SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors....

Mantis

7.5

CVSSv2

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter....

Mantis

4

CVSSv2

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072....

Theforeman Katello

10

CVSSv2

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name....

Proftpd Project Proftpd1 EDB exploit available

7.5

CVSSv2

SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the (1) Data Set...

Dashbuilder Project Dashbuilder Redhat Jboss Bpm Suite Jboss Enterprise Brms Platform

7.5

CVSSv2

SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signature_bbcode_uid parameter, which is not properly initialized....

Phpbb Group Phpbb

5

CVSSv2

A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs....

Phpbb Group Phpbb

7.5

CVSSv2

SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type....

Phpbb Group Phpbb

« PREV 1 2 3 4 5 6 7 NEXT »