Sql injection

ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

CVE-2023-33666

ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

CVE-2023-33665

ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

PrestaShop ai-dev aitable SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in PrestaShop ai-dev aitable, which originates from an SQL injection that can be...

CVE-2023-33666: Improper Neutralization of Special Elements used in an SQL Command

ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

CVE-2023-33665: Improper Neutralization of Special Elements used in an SQL Command

ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

PT-2023-24444

Name of the Vulnerable Software and Affected Versions ai-dev aitable versions prior to 0.2.2 Description The issue is related to a SQL injection vulnerability. It affects the component /includes/ajax.php. Recommendations For versions prior to 0.2.2, update to version 0.2.2 or later to resolve the...

CVE-2023-33664: Improper Neutralization of Special Elements used in an SQL Command

ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

PT-2023-24443 · Unknown · Ai-Dev Aicombinationsonfly

Name of the Vulnerable Software and Affected Versions: ai-dev aicombinationsonfly versions prior to 0.3.1 Description: The issue is a SQL injection vulnerability. It affects the component /includes/ajax.php. Recommendations: For versions prior to 0.3.1, update to version 0.3.1 or later to resolve...

CVE-2012-1001

Multiple cross-site scripting XSS vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 content parameter to includes/ajax.php or 2 body parameter to includes/error.php...

PT-2019-6731

Name of the Vulnerable Software and Affected Versions Chyrp versions prior to 2.1.2 Chyrp versions prior to 2.5 Beta 2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the content parameter to "includes/ajax.php" or the body parameter ...

CVE-2012-1001: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 content parameter to includes/ajax.php or 2 body parameter to includes/error.php...