CVE-2021-2032

Vulnerability in the MySQL Server product of Oracle MySQL component: Information Schema. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2021-2032

CVE-2021-2032 affects Oracle MySQL Server (component: Information Schema). Affected versions: 5.7.32 and prior, 8.0.22 and prior. A low-privilege, network-accessible attacker via multiple protocols can read a subset of MySQL data. CVSS v3.1 base score 4.3 (C:L/I:N/A:N). No exploitation details or...

CVE-2021-2032: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Information Schema. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2021-04759)

Oracle MySQL is an open source relational database management system.MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Information Schema component in Oracle MySQL Server 5.7.32, 8.0.22, and...

CVE-2021-22852

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

CVE-2021-22851

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter document management page to obtain database schema and data...

CVE-2021-22851

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter document management page to obtain database schema and data...

Sql injection

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter document management page to obtain database schema and data...

Sql injection

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

CVE-2021-22852

HGiga EIP product contains a SQL Injection vulnerability disclosed in CVE-2021-22852. The vulnerability affects the product’s online registration URL parameter, allowing attackers to inject SQL commands to access database schema and data. The provided documents confirm the affected component (HGi...

CVE-2021-22852 HGiga OAKloud Portal - SQL injection -2

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

CVE-2021-22851 HGiga OAKloud Portal - SQL injection -1

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter document management page to obtain database schema and data...

CVE-2021-22852

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

HGiga EIP SQL Injection Vulnerability

A SQL injection vulnerability exists in HGiga EIP product, which can be exploited by an attacker to inject SQL commands into specific URL parameters document management pages to obtain database schema and data...

PT-2021-15225

Name of the Vulnerable Software and Affected Versions HGiga EIP product affected versions not specified Description The issue allows attackers to inject SQL commands into a specific URL parameter, namely the online registration parameter, to obtain the database schema and data. Recommendations At...

CVE-2021-22851: Improper Neutralization of Special Elements used in an SQL Command

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter document management page to obtain database schema and data...

CVE-2021-22852: Improper Neutralization of Special Elements used in an SQL Command

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

HGiga EIP SQL Injection Vulnerability

A SQL injection vulnerability exists in HGiga EIP product, which can be exploited by an attacker to obtain database schema and data by injecting SQL commands into specific URL parameters online registration...

PT-2021-15224

Name of the Vulnerable Software and Affected Versions HGiga EIP product affected versions not specified Description The issue allows attackers to inject SQL commands into a specific URL parameter on the document management page to obtain database schema and data. Recommendations At the moment,...

Oracle MySQL Access Control Vulnerability

Oracle MySQL is an open source relational database management system.MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Information Schema component in Oracle MySQL Server 5.7.32, 8.0.22, and...