9 matches found
CVE-2025-8123: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
Octopus SQL Injection Vulnerability
Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. An SQL injection vulnerability exists in Octopus version 1.0, which stems from the parameter ancestors in the file /system/dept/edit that can lead to SQL injection...
PT-2024-15895 · Unknown · Hongmaple Octopus
Name of the Vulnerable Software and Affected Versions: hongmaple octopus version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /system/dept/edit. The manipulation of the ancestors argument leads to SQL injection. This issue can be...
CVE-2024-0890: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2023-49371
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
PT-2023-31185 · Ruoyi · Ruoyi
Name of the Vulnerable Software and Affected Versions: RuoYi versions up to v4.6 Description: The issue is a SQL injection vulnerability. It can be exploited via the "/system/dept/edit" API endpoint. Recommendations: For versions up to v4.6, as a temporary workaround, consider restricting access ...
CVE-2023-49371: Improper Neutralization of Special Elements used in an SQL Command
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
