CVE-2022-30012: Improper Neutralization of Special Elements used in an SQL Command

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

PT-2022-19968

Name of the Vulnerable Software and Affected Versions HMS version 0 Description The issue concerns SQL injection vulnerabilities in multiple parameters of the POST request on the appointment.php page. These vulnerabilities allow for the potential obtainment of database information through...

SQL Injection Vulnerability in Centron View Cloud Terminal Security Management System

Centrin JingYun Terminal Security Management System is an enterprise-level network anti-virus system developed by Beijing Centrin Link Information Technology Co. There is a SQL injection vulnerability in CentronView Cloud Terminal Security Management System, which can be exploited by attackers to...

SQL Injection Vulnerability in Panavision Cloud Bridge

Panavision Cloud Bridge e-Bridge is a system integration middleware used to bridge open Internet resources with enterprise information systems. A SQL injection vulnerability exists in e-Bridge, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Siltronic Technology Limited (CNVD-2022-41797)

Siltronic is a company dedicated to the cause of disaster prevention and mitigation in China, providing the government with comprehensive solutions for disaster prevention and mitigation informatization. A SQL injection vulnerability exists in the website builder system of Siltronic Technology...

PT-2022-11512

Name of the Vulnerable Software and Affected Versions The Magic CMS MSVOD version 10 Description The issue is related to a SQL injection vulnerability. Attackers can exploit this to obtain sensitive information in the database. Recommendations For The Magic CMS MSVOD version 10, at the moment,...

SQL Injection Vulnerability in e-office of Shanghai Panmicro Network Technology Co.

e-office is a standard collaborative mobile office platform. Ltd. e-office suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

CVE-2022-27041

Due to lack of protection, parameter studentid in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases...

CVE-2022-26986

SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to read and modify the sensitive information from the database used by the application. If misconfigured, an attacker can even upload a malicious web shell to...

CVE-2022-23183: Missing Authorization

Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows a remote authenticated attacker to view the information on the database without the access permission...

CVE-2022-0842: Improper Neutralization of Special Elements used in an SQL Command

A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a remote authenticated attacker to potentially obtain information from the ePO database. The data obtained is dependent on the privileges the attacker has and to obtain sensitive data...

SQL Injection Vulnerability in UFIDA U8-OA Enterprise Edition (CNVD-2022-31182)

UFIDA Network Technology Corporation is an enterprise cloud services and software provider. A SQL injection vulnerability exists in UFIDA U8-OA Enterprise Edition, which can be exploited by attackers to obtain sensitive database information...

CVE-2021-40636

OS4ED openSIS 8.0 is affected by SQL Injection in CheckDuplicateName.php, which can extract information from the database...

CVE-2021-40635

OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch.php, ChooseRequestSearch.php. An attacker can inject a SQL query to extract information from the database...

CVE-2021-40636: Improper Neutralization of Special Elements used in an SQL Command

OS4ED openSIS 8.0 is affected by SQL Injection in CheckDuplicateName.php, which can extract information from the database...

CVE-2021-40635: Improper Neutralization of Special Elements used in an SQL Command

OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch.php, ChooseRequestSearch.php. An attacker can inject a SQL query to extract information from the database...

PT-2022-11281

Name of the Vulnerable Software and Affected Versions OS4ED openSIS version 8.0 Description The issue allows an attacker to inject a SQL query to extract information from the database due to SQL injection in ChooseCpSearch.php and ChooseRequestSearch.php. Recommendations For OS4ED openSIS version...

CVE-2022-23986

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors...

CVE-2022-23986

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors...

PT-2022-16389

Name of the Vulnerable Software and Affected Versions phpUploader versions 1.2 and earlier Description A SQL injection issue allows a remote unauthenticated attacker to obtain database information via unspecified vectors. Recommendations For phpUploader versions 1.2 and earlier, at the moment,...