CVE-2023-5430: Improper Neutralization of Special Elements used in an SQL Command

The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

Sql injection

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

JIZHICMS SQL Injection Vulnerability

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from China's Extreme Networks Technology. A SQL injection vulnerability exists in Jizhicms version 2.4.9, which originates from a SQL injection vulnerability in the backend. An attacker can exploit th...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

CVE-2023-43836: Improper Neutralization of Special Elements used in an SQL Command

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

CVE-2023-40046: Improper Neutralization of Special Elements used in an SQL Command

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a SQL injection vulnerability exists in the WSFTP Server manager interface. An attacker may be able to infer information about the structure and contents of the database and execute SQL statements that alter or delete database elements...

CVE-2023-31717

A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...

Knowage SQL注入漏洞

Knowage is an open source suite for modern business analytics on legacy resources and big data systems from Knowage, Italy. Knowage suffers from an SQL injection vulnerability. An attacker exploiting this vulnerability could retrieve sensitive information from a database...

CVE-2023-2201 Web Directory Free <= 1.6.8 - Authenticated (Contributor+) SQL Injection via post_id

The Web Directory Free for WordPress is vulnerable to SQL Injection via the ‘postid’ parameter in versions up to, and including, 1.6.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...

Bang Resto v1.0 - (Multiple) SQL Injection Vulnerability

Exploit Title: Bang Resto v1.0 - 'Multiple' SQL Injection Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Software Link: https://github.com/mesinkasir/bangresto/archive/refs/heads/main.zip Version: 1.0 Tested on: Windo...

Panmicro ecology9 SQL Injection Vulnerability

Ecology9 is a new and efficient collaborative office system created by Panmicro for medium and large organizations. There is a SQL injection vulnerability in Panmicro ecology9, which can be exploited by attackers to obtain sensitive database information...

PT-2023-11327 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number from the National Vulnerability...

PT-2023-14874 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

ptome SQL注入漏洞

ptome is an application. A SQL injection vulnerability exists in ptome. An attacker could exploit this vulnerability to obtain sensitive database information...

CVE-2022-4166

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4activate.php. This may allow malicious users with at least author privilege to leak sensitive informati...

CVE-2022-4158: Undefined Security Weakness

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgFields POST parameter before concatenating it to an SQL query in users-registry-check-registering-and-login.php. This may allow malicious visitors to leak sensitive...

SQL Injection Vulnerability in the Unified Management System of Shanghai Inlitech Digital Technology Co.

Ltd. is a company whose business scope includes engaging in technology development in the fields of digital technology, network technology and integrated circuit technology. A SQL injection vulnerability exists in the Unified Management System of Shanghai Inalways Digital Technology Co., Ltd, whi...

WordPress WP User Merger plugin SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Versions of WordPress WP Us...