GHSA-6Q3Q-6V5J-H6VG Querydsl vulnerable to HQL injection through orderBy

Summary The order by method enables injecting HQL queries. This may cause blind HQL injection, which could lead to leakage of sensitive information, and potentially also Denial Of Service. This vulnerability is present since the original querydsl repositoryhttps://github.com/querydsl/querydsl whe...

CVE-2024-51843

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Olland.Biz Horsemanager allows Blind SQL Injection.This issue affects Horsemanager: from n/a through 1.3...

PT-2024-34973 · Unknown · Richteam Share Buttons – Social Media

Name of the Vulnerable Software and Affected Versions: Richteam Share Buttons – Social Media versions 1.0.2 and earlier Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection', which allows Blind SQL Injection. This...

PT-2024-35013 · Unknown · Gboy Custom Google Map

Name of the Vulnerable Software and Affected Versions: Gboy Custom Google Map versions n/a through 1.2 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection, whic...

PT-2024-34762 · Unknown · Market 360 Viewer

Name of the Vulnerable Software and Affected Versions: Market 360 Viewer versions n/a through 1.01 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for Blind SQL Injection in the Market 360 Viewe...

WordPress plugin Porsline SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

PT-2024-34145

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.14.6 SuiteCRM versions prior to 8.7.1 Description: The issue is caused by insufficient input value validation, leading to Blind SQL injection in the DeleteRelationShip function. This allows for potential...

PT-2024-9272 · Servicenow · Servicenow Now Platform

Name of the Vulnerable Software and Affected Versions: ServiceNow Now Platform affected versions not specified Description: The issue is related to a blind SQL injection vulnerability in the Now Platform, which could allow an unauthenticated user to extract unauthorized information. This...

ServiceNow Now Platform 安全漏洞

ServiceNow Now Platform is a cloud-based platform from US-based ServiceNow that uses AI and machine learning to automate and optimize work across the enterprise. ServiceNow Now Platform has a security vulnerability that stems from a blind SQL injection, which could allow an unauthenticated user t...

CVE-2024-49619

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Acespritech Solutions Pvt. Ltd. Social Link Groups allows Blind SQL Injection.This issue affects Social Link Groups: from n/a through 1.1.0...

CVE-2024-49612

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Infotuts SW Contact Form allows Blind SQL Injection.This issue affects SW Contact Form: from n/a through 1.0...

CVE-2024-49623

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hasan Movahed Duplicate Title Validate allows Blind SQL Injection.This issue affects Duplicate Title Validate: from n/a through 1.0...

PT-2024-33572 · Unknown · Bhaskar Dhote Back Link Tracker

Name of the Vulnerable Software and Affected Versions: Bhaskar Dhote Back Link Tracker versions n/a through 1.0.0 Description: The issue affects Bhaskar Dhote Back Link Tracker, allowing Blind SQL Injection via a Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to inject...

PT-2024-33571 · Unknown · Nyasro Rate Own Post

Name of the Vulnerable Software and Affected Versions: Nyasro Rate Own Post versions from n/a through 1.0 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection,...

PT-2024-33567 · Unknown · Infotuts Sw Contact Form

Name of the Vulnerable Software and Affected Versions: Infotuts SW Contact Form versions n/a through 1.0 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an SQL command. This...

PT-2024-33575 · Unknown · Ferma.Ru.Net

Name of the Vulnerable Software and Affected Versions: FERMA.Ru.Net versions 1.3.3 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an SQL command. This allows an...

U.S. Dept Of Defense: SQL Injection

The application was found to have a blind SQL injection vulnerability in the 'filterevent' parameter. The vulnerability allowed an attacker to manipulate database queries and extract sensitive information from the database through time-based or boolean-based techniques, as the injection was blind...

Exploit for CVE-2024-55270

Student Management System 1.0 CVE-2024-55270 Overview T...

PT-2024-38062

Name of the Vulnerable Software and Affected Versions Semtek Sempos versions through 31072024 Description The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, which affects Semtek Sempos. This vulnerability is due to the improper neutralization of special...

CVE-2024-6919

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection.This issue affects NACPremium: through 01082024...