Care2x 2.7 (HIS) Hospital Information System - Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avila Category: webapps Tested on:...

CVE-2018-20730: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read commands via the query.php component...

PT-2019-10189

Name of the Vulnerable Software and Affected Versions: NeDi versions prior to 1.7Cp3 Description: A SQL injection issue allows any user to execute arbitrary SQL read commands via the "query.php" component. Recommendations: For versions prior to 1.7Cp3, update to version 1.7Cp3 or later to resolve...

SQL Command Injection By Leveraging Improper Range Quoting

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting...

SQL Command Injection By Leveraging Improper Bitstring Quoting

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresqladapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leveraging improper bitstring quoting...

PT-2019-5408

Name of the Vulnerable Software and Affected Versions SQLite version 3.25.2 Description The issue is related to the execution of queries on a table with a malformed PRIMARY KEY, allowing remote attackers to cause a denial of service by running arbitrary SQL statements. This can be exploited in...

eBrigade ERP 4.5 SQL Injection

Exploit Title: eBrigade ERP 4.5 - SQL Injection Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://ebrigade.net/ Software Link: https://netcologne.dl.sourceforge.net/project/ebrigade/ebrigade/eBrigade%204.5/ebrigade4.5.zip Version: 4.5 Category: Webapps Tested on:...

CVE-2018-16188

SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached D5520, D6500, D6510, D7500, D8400, and the display versions with RICOH...

Sql injection

SQL injection vulnerability in the LearnPress prior to version 3.1.0 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-16175

SQL injection vulnerability in the LearnPress prior to version 3.1.0 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

PT-2019-9254

Name of the Vulnerable Software and Affected Versions RICOH Interactive Whiteboard D2200 versions 1.3 through 2.2 RICOH Interactive Whiteboard D5500 versions 1.3 through 2.2 RICOH Interactive Whiteboard D5510 versions 1.3 through 2.2 RICOH Interactive Whiteboard Controller Type1 versions 1.3...

PT-2019-9240

Name of the Vulnerable Software and Affected Versions LearnPress versions prior to 3.1.0 Description A SQL injection issue allows an attacker with administrator rights to execute arbitrary SQL commands. The estimated number of potentially affected devices and details about real-world incidents ar...

CVE-2018-16175: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the LearnPress prior to version 3.1.0 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

SQL Injection

dolibarr/dolibarr is vulnerable to SQL injection. A lack of validation on the desiredstock parameter in product/card.php allows a remote authenticated attacker to execute arbitrary SQL commands via an error-based SQL injection vulnerability. This vulnerability could potentially allow for remote...

CVE-2018-19998

SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter...

CVE-2018-19994

An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter...

CVE-2018-19998

SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter...

CVE-2018-19415

Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to joingroup.php or 2 commentid parameter to story.php...

CVE-2018-19998

SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter...

CVE-2018-19994

An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter...