SQL Injection

nukeviet/nukeviet is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of the topicsid parameter in modules/news/admin/addtotopics.php, which allows an attacker to execute malicious SQL queries through crafted input...

EUVD-2022-3103

Malicious code in bioql PyPI...

CVE-2020-21808

SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php...

CVE-2020-21808

SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php...

CVE-2020-21808: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php...

PT-2019-6069

Name of the Vulnerable Software and Affected Versions NukeViet CMS versions 4.0.10 through 4.3.07 Description The issue is related to a SQL Injection vulnerability. It is associated with the lack of protection for the SQL query structure in the addtotopics.php script of the built-in News module...