sql injection vulnerabilities and exploits

(subscribe to this query)

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI.

Quickad Project Quickad 4.0

1 EDB exploit

SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price_type=range&price= request.

Getaffiligator Affiligator 2.1.0

1 EDB exploit

SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field.

Zechat Project Zechat 1.5

1 EDB exploit

SQL injection vulnerability in Piwigo prior to 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.

1 EDB exploit

SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Xia Zuojie Nexusphp 1.5

1 EDB exploit

Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/WapPushManager.java in the WAPPushManager module in Android prior to 5.0.0 allow remote malicious users to execute arbitrary SQL commands, and consequently launch ...

Google Android Google Android 1.0 Google Android 1.1 Google Android 1.5 Google Android 1.6 Google Android 2.0 Google Android 2.0.1 Google Android 2.1 Google Android 2.2 Google Android 2.2.1 Google Android 2.2.2 Google Android 2.2.3

1 EDB exploit

Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla! allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter in a showItem action and (2) cid parameter in a show action to index.php.

Blueconstantmedia Com Djcatalog

1 EDB exploit

SQL injection vulnerability in Symphony CMS prior to 2.3.2 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter to system/authors/. NOTE: this can be leveraged using CSRF to allow remote unauthenticated malicious users to execute arbitrary SQ...

Getsymphony Symphony Getsymphony Symphony 2.0 Getsymphony Symphony 2.0.3 Getsymphony Symphony 2.0.4 Getsymphony Symphony 2.0.5 Getsymphony Symphony 2.0.6 Getsymphony Symphony 2.0.7 Getsymphony Symphony 2.1.0 Getsymphony Symphony 2.1.1 Getsymphony Symphony 2.3

1 EDB exploit

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and previous versions allow remote malicious users to execute arbitrary SQL commands via the id parameter in a (1) get or (2) set action to rate.php.

Freereprintables Articlefr

1 EDB exploit

Multiple SQL injection vulnerabilities in Gespage prior to 7.4.9 allow remote malicious users to execute arbitrary SQL commands via the (1) show_prn parameter to webapp/users/prnow.jsp or show_month parameter to (2) webapp/users/blhistory.jsp or (3) webapp/users/prhistory.jsp.

Gespage Gespage

1 EDB exploit

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook