5465 matches found
Sql injection
JFrog Artifactory before 7.25.4 Enterprise+ deployments only, is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query...
CVE-2021-3860
JFrog Artifactory before 7.25.4 Enterprise+ deployments only, is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query...
CVE-2021-3860: Improper Neutralization of Special Elements used in an SQL Command
JFrog Artifactory before 7.25.4 Enterprise+ deployments only, is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query...
PT-2021-22238 · Jfrog · Jfrog Artifactory
Name of the Vulnerable Software and Affected Versions: JFrog Artifactory versions prior to 7.25.4 Description: The issue is related to Blind SQL Injection, which can be exploited by a low-privileged authenticated user due to incomplete validation when performing an SQL query. Recommendations: For...
CVE-2021-3860
JFrog Artifactory before 7.25.4 Enterprise+ deployments only, is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query...
CVE-2021-24946 Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection
The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mecloadsinglepage AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue...
PT-2021-16248
Name of the Vulnerable Software and Affected Versions: SEO Booster WordPress plugin versions prior to 3.8 Description: The issue allows for authenticated SQL injection via the "fn my ajaxified dataloader ajax" AJAX request. The $ REQUEST'order'0'dir' parameter is not properly escaped, leading to...
CVE-2021-24747: Improper Neutralization of Special Elements used in an SQL Command
The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fnmyajaxifieddataloaderajax" AJAX request as the $REQUEST'order'0'dir' parameter is not properly escaped leading to blind and error-based SQL injections...
GHSA-6XXJ-GCJQ-WGF4 SQL injection in prestashop/prestashop
Impact Blind SQLi using Search filters with orderBy and sortOrder parameters Patches The problem is fixed in 1.7.8.2...
CVE-2021-40578
CVE-2021-40578 affects PayPal Free Source Code 1.0 Online Enrollment Management System. The vulnerability is an Authenticated Blind & Error-based SQL injection via the IDNO parameter, enabling an attacker with valid credentials to access sensitive data and execute arbitrary SQL commands. Document...
CVE-2021-43789
PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with orderBy and sortOrder parameters. The problem is fixed in version 1.7.8.2...
Sql injection
PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with orderBy and sortOrder parameters. The problem is fixed in version 1.7.8.2...
CVE-2021-43789
PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with "orderBy" and "sortOrder" parameters. The problem is fixed in version 1.7.8.2...
CVE-2021-43789
CVE-2021-43789 affects PrestaShop prior to 1.7.8.2. The vulnerability is a blind SQL injection in search filters using the responsible parameters, specifically through the fields “orderBy” and “sortOrder.” The issue is fixed in version 1.7.8.2. Public references and OSV/GHSA entries reiterate the...
CVE-2021-43789: Improper Neutralization of Special Elements used in an SQL Command
PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with orderBy and sortOrder parameters. The problem is fixed in version 1.7.8.2...
PT-2021-23935
Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 1.7.8.2 Description: PrestaShop is an Open Source e-commerce web application. The issue is related to blind SQL injection using search filters with orderBy and sortOrder parameters. Recommendations: For PrestaShop...
PT-2021-22932
Name of the Vulnerable Software and Affected Versions Online Enrollment Management System in PHP and PayPal Free Source Code version 1.0 Description The issue allows attackers to obtain sensitive information and execute arbitrary SQL commands via the IDNO parameter. This is an Authenticated Blind...
CVE-2021-25784
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article...