Eryaz NatraCar B2B Dealer Management Program has a security vulnerability

Eryaz NatraCar B2B Dealer Management Program is a dealer management system from Eryaz. A security vulnerability exists in Eryaz NatraCar B2B Dealer Management Program that stems from improper use of special elements in SQL commands, resulting in a SQL injection vulnerability...

Kashipara E-learning Management System Security Vulnerabilities

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0, which originates from an SQL injection vulnerability in /admin/deleteclass.php...

Kashipara E-learning Management System Security Vulnerabilities

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit the vulnerability to access the database by executing arbitrary SQL commands via the title and content...

PT-2024-17522 · WordPress · Beautiful Taxonomy Filters

Name of the Vulnerable Software and Affected Versions: The Beautiful taxonomy filters plugin for WordPress versions up to, and including, 2.4.3 Description: The issue is related to SQL Injection via the selects0term parameter due to insufficient escaping on the user-supplied parameter and lack of...

CVE-2024-11730

The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to SQL Injection via the 'sort' parameter of the staticdatalist AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient...

PT-2024-34758 · WordPress · Wordpress Auction Plugin

Name of the Vulnerable Software and Affected Versions: WordPress Auction Plugin versions n/a through 3.7 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2024-35930 · Unknown · Pinpoint Booking System

Name of the Vulnerable Software and Affected Versions: Pinpoint Booking System versions through 2.9.9.5.1 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, which arises from the improper neutralization of special elements used in an SQL...

WordPress plugin KiviCare has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

PT-2024-17494 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Complaint Management System. It affects an unknown function of the file /admin/user-search.php. The manipulation of the...

PT-2024-17495 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Complaint Management System. The issue affects an unknown functionality of the file /admin/complaint-search.php...

Taier security vulnerabilities

Taier is a distributed scheduling system open-sourced by Kangaroo Cloud DTStack. It is designed to reduce the cost of ETL, clarify complex dependencies between tasks, and reduce labor costs for committing, scheduling, and operations. A security vulnerability exists in Taier version 1.4.0 that ste...

PHPGurukul Complaint Management System security vulnerabilities

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter search in the file /admin/user-search.php that can lead to sql injection. No details of the vulnerability...

1000 Projects Library Management System security vulnerabilities

1000 Projects Library Management System is an open source library management system from 1000 Projects. A security vulnerability exists in 1000 Projects Library Management System version 1.0 due to an SQL injection in the parameter useri...

CVE-2024-53502

Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMSSeoAndTag.php page...

ZZCMS security vulnerabilities

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2023, which stems from an SQL injection vulnerability contained in /q/show.php...

WordPress Plugin Project Manager security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in the...

PT-2024-17392 · Unknown · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A critical issue has been identified, affecting unknown code in the /visualizer-forneccedor.chp file. The manipulation of the id argument leads to SQL injection. This issue can be exploited...

PT-2024-35767 · Siyuan · Siyuan

Name of the Vulnerable Software and Affected Versions: Siyuan version 3.1.11 Description: A SQL injection issue was found in the /getHistoryItems endpoint. This allows for potential exploitation through SQL injection attacks. No information is provided about the estimated number of affected devic...

Vulnerability fixed in Zabbix

A vulnerability has been fixed in Zabbix. The vulnerability is in how the CUser class handles the addRelatedObjects function. This could allow non-administrators with API access to perform an SQL injection, which could lead to unauthorized access to sensitive data. The vulnerability could enable...

PT-2024-35314 · Unknown · Express Payments Module

Name of the Vulnerable Software and Affected Versions: Express Payments Module versions n/a through 1.1.8 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an SQL command. This...