PT-2023-32120

Name of the Vulnerable Software and Affected Versions Popup with fancybox plugin for WordPress versions up to, and including, 3.5 Description The issue arises from insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query in the plugin's...

PT-2023-30165

Name of the Vulnerable Software and Affected Versions LuxCal Web Calendar versions prior to 5.2.4M MySQL version LuxCal Web Calendar versions prior to 5.2.4L SQLite version Description A SQL injection issue allows a remote unauthenticated attacker to execute an arbitrary SQL command by sending a...

SQL Injection Vulnerability in PLM of Jishikai Industrial Software Co.

Jishikai Industrial Software Ltd. is an enterprise mainly engaged in software and information technology service industry. A SQL injection vulnerability exists in PLM of Jishikai Industrial Software Limited, which can be exploited by attackers to obtain sensitive information from the database...

PT-2023-32119

Name of the Vulnerable Software and Affected Versions Jquery accordion slideshow plugin for WordPress versions up to, and including, 8.1 Description The issue arises from insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query, allowing...

CVE-2023-5430: Improper Neutralization of Special Elements used in an SQL Command

The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2023-2681

An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote user, with low privileges, to send queries with malicious SQL code on the "/leaves/validate" path and the “id” parameter, managing to extract arbritary information from the...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

Sql injection

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

JIZHICMS SQL Injection Vulnerability

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from China's Extreme Networks Technology. A SQL injection vulnerability exists in Jizhicms version 2.4.9, which originates from a SQL injection vulnerability in the backend. An attacker can exploit th...

CVE-2023-43836: Improper Neutralization of Special Elements used in an SQL Command

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

CVE-2023-40046: Improper Neutralization of Special Elements used in an SQL Command

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a SQL injection vulnerability exists in the WSFTP Server manager interface. An attacker may be able to infer information about the structure and contents of the database and execute SQL statements that alter or delete database elements...

CVE-2023-31717

A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...

Knowage SQL注入漏洞

Knowage is an open source suite for modern business analytics on legacy resources and big data systems from Knowage, Italy. Knowage suffers from an SQL injection vulnerability. An attacker exploiting this vulnerability could retrieve sensitive information from a database...

PT-2023-18463

Name of the Vulnerable Software and Affected Versions WP Replicate Post plugin for WordPress versions up to, and including, 4.0.2 Description The issue allows contributor-level attackers or higher to extract sensitive information from the database due to insufficient escaping on the user-supplied...

CVE-2023-2201 Web Directory Free <= 1.6.8 - Authenticated (Contributor+) SQL Injection via post_id

The Web Directory Free for WordPress is vulnerable to SQL Injection via the ‘postid’ parameter in versions up to, and including, 1.6.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...

Bang Resto v1.0 - (Multiple) SQL Injection Vulnerability

Exploit Title: Bang Resto v1.0 - 'Multiple' SQL Injection Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Software Link: https://github.com/mesinkasir/bangresto/archive/refs/heads/main.zip Version: 1.0 Tested on: Windo...

PT-2023-11327 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number from the National Vulnerability...

Panmicro ecology9 SQL Injection Vulnerability

Ecology9 is a new and efficient collaborative office system created by Panmicro for medium and large organizations. There is a SQL injection vulnerability in Panmicro ecology9, which can be exploited by attackers to obtain sensitive database information...