218 matches found
CVE-2025-60798
phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $REQUEST'query' directly to the browseQuery function without proper sanitization. An authenticated attacker can exploit this vulnerability to execute...
CVE-2025-63718
The CVE-2025-63718 entry describes a SQL injection in SourceCodester PQMS 1.0 at api_patient_schedule.php, where the appointmentID parameter is not properly sanitized, enabling arbitrary SQL commands. This is evidenced across multiple connected sources (e.g., Red Hat, EUVD, NVD/CVE records, CNVD,...
The vulnerability of the C++ Log4cxx logging framework lies in the lack of security measures for SQL query structures, allowing attackers to execute arbitrary SQL queries in the database.
The vulnerability of the C++ logging framework Apache Log4cxx is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries in the database remotely...
E-Commerce Website product_add_qty.php file SQL injection vulnerability
E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter prodid in file /pages/productaddqty.php. An attacker can exploit this vulnerability to execu...
EUVD-2004-1834
Malware in sbrugna...
EUVD-2005-2691
Malware in sbrugna...
EUVD-2003-1206
Malware in sbrugna...
EUVD-2024-31511
Malicious code in bioql PyPI...
EUVD-2025-7076
Malicious code in bioql PyPI...
EUVD-2024-52675
Malicious code in bioql PyPI...
EUVD-2024-48286
Malicious code in bioql PyPI...
EUVD-2022-24847
Malicious code in bioql PyPI...
EUVD-2024-35159
Malicious code in bioql PyPI...
EUVD-2024-16762
Malicious code in bioql PyPI...
EUVD-2021-27771
Malicious code in bioql PyPI...
EUVD-2022-42772
Malicious code in bioql PyPI...
EUVD-2025-7089
Malicious code in bioql PyPI...
Sports Management System mode.php File SQL Injection Vulnerability
Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter code in the file /Admin/mode.php. An attacker can exploit this vulnerability...
RLSA-2024:0974 Important: postgresql:12 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL CVE-2024-0985 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and oth...
Security Bulletin: Multiple Vulnerabilities Affected for EDB
Summary Multiple Vulnerabilities Affected for EDB has been addressed for EDB PostgreSQL with IBM and EDB Postgres Advanced Server with IBM Vulnerability Details CVEID:CVE-2025-1094 DESCRIPTION: Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral,...