CVE-2022-22367: Cleartext Storage of Sensitive Information

IBM UrbanCode Deploy UCD 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain text. IBM X-Force ID: 221008...

PT-2022-15394

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 Description The issue could disclose sensitive database information to a local user in plain text. Recommendations For versions 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1,...

CVE-2022-22494

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940...

Xxe

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

CVE-2022-31447

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

CVE-2022-31447: Improper Restriction of XML External Entity Reference

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

SQL Injection Vulnerability in mymps Backend

mymps is a php mysql based website builder. SQL injection vulnerability exists in mymps backend, which can be exploited by attackers to obtain sensitive database information...

CVE-2020-36523

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

CVE-2020-36523

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

Cross site scripting

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

CVE-2020-36523 PlantUML Database Information Macro cross site scripting

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

CVE-2020-36523: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

SQL Injection Vulnerability in Easy Attendance WEB Attendance Management Software

Easy Attendance WEB attendance management software is a network version of the B / S architecture WEB attendance management software. Eqin WEB Attendance Management Software has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Sql injection

Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates for the Manage Alerts page via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user,...

CVE-2021-35487

Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates for the Manage Alerts page via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user,...

Multi-Vendor Online Groceries Management System SQL Injection Vulnerability

Multi-Vendor Online Groceries Management System is a multi-vendor online grocery management system. A SQL injection vulnerability exists in Multi-Vendor Online Groceries Management System version 1.0, which can be exploited by an attacker to obtain sensitive database information via the id...

Covid-19 Travel Pass Management System SQL Injection Vulnerability

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. It provides an online platform for individuals to submit travel passes within the Covid-19 restrictions. A SQL injection vulnerability exists in Covid-19 Travel Pass Management System version 1.0, which stems from...

HMS SQL Injection Vulnerability

HMS is a computer or web-based hospital management system. version 1.0 of HMS is vulnerable to SQL injection, which stems from the presence of multiple parameters that can lead to SQL injection when requesting appointment.php using the POST method. An attacker could use this vulnerability to obta...

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

SQL Injection Vulnerability in Panmicroeoffice8 (CNVD-2022-43843)

Panavision eoffice8 is a mobile office platform. A SQL injection vulnerability exists in Panmicroeoffice8, which can be exploited by attackers to obtain sensitive information from the database...