Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-09-11 | CVE-2015-9226 | SQL Injection vulnerability in Alegrocart 1.2.8 Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the (1) check_download and possibly (2) check_filename function in upload/admin2/model/products/model_admin_download.php or remote authenticated users with a valid Paypal transaction token to execute arbitrary SQL commands via the ref parameter in the (3) orderUpdate function in upload/catalog/extension/payment/paypal.php. | 7.2 |
| 2017-09-11 | CVE-2015-7877 | SQL Injection vulnerability in User Dashboard Project User Dashboard 7.X1.2/7.X1.3/7.X1.Xdev Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors. | 9.8 |
| 2017-09-11 | CVE-2017-14252 | SQL Injection vulnerability in Eyesofnetwork 5.10 SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php. | 9.8 |
| 2017-09-11 | CVE-2017-14247 | SQL Injection vulnerability in Eyesofnetwork 5.10 SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060. | 9.8 |
| 2017-09-11 | CVE-2017-14242 | SQL Injection vulnerability in Dolibarr 6.0.0 SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter. | 9.8 |
| 2017-09-11 | CVE-2017-14238 | SQL Injection vulnerability in Dolibarr 6.0.0 SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter. | 9.8 |
| 2017-09-09 | CVE-2017-12731 | SQL Injection vulnerability in Opwglobal products A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. | 9.8 |
| 2017-09-08 | CVE-2017-11161 | SQL Injection vulnerability in Synology Photo Station Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to label.php; or (2) type parameter to synotheme.php. | 9.8 |
| 2017-09-07 | CVE-2017-12227 | SQL Injection vulnerability in Cisco Emergency Responder A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. | 5.4 |
| 2017-09-07 | CVE-2015-5052 | SQL Injection vulnerability in Sefrengo 1.2.0/1.6.5 SQL injection vulnerability in Sefrengo before 1.6.5 beta2. | 9.8 |