PT-2024-37793 · Unknown · Witmy My-Springsecurity-Plus

Name of the Vulnerable Software and Affected Versions: witmy my-springsecurity-plus affected versions not specified Description: A critical issue has been found, affecting an unknown functionality of the file /api/user. The manipulation of the params.dataScope argument leads to SQL injection. The...

WordPress plugin Houzez CRM security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Learning Management System 安全漏洞

Learning Management System is itsourcecode open source a learning management system . Learning Management System version 1.0 suffers from a SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statements . Attackers can use this...

PT-2024-28344 · Unknown · Fujian Kelixun

Name of the Vulnerable Software and Affected Versions: Fujian Kelixun versions prior to 7.6.6.4391 Description: The issue is related to SQL Injection in the "send event.php" file. This allows for potential exploitation. Recommendations: For versions prior to 7.6.6.4391, update to a version that...

WordPress plugin Tutor LMS SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

PT-2024-27802 · Unknown · Itsourcecode Payroll Management System Project In Php With Source Code

Name of the Vulnerable Software and Affected Versions: Itsourcecode Payroll Management System Project In PHP With Source Code version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the view payslip.php file. This enables attackers to...

WordPress plugin WishList Member X SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A SQL injection...

Vanna Information Disclosure Vulnerability

Vanna is a personalized AI SQL agent from Vanna. An information disclosure vulnerability exists in v0.3.4 of vanna, which stems from the vulnerability of certain file-related functions to SQL injection attacks. An unauthenticated, remote attacker exploiting this vulnerability could read arbitrary...

CVE-2024-6453

A vulnerability was found in itsourcecode Farm Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /quarantine.php?id=3. The manipulation of the argument pigno/breed/reason leads to sql injection. The attack can be launch...

PT-2024-5239 · 1Panel · 1Panel

Name of the Vulnerable Software and Affected Versions: 1Panel versions prior to 1.10.12-tls Description: The issue is related to SQL injections in the 1Panel project, specifically with the orderBy parameter, which can lead to arbitrary file writes and ultimately to remote code execution RCE. The...

PT-2024-37432

Name of the Vulnerable Software and Affected Versions: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin versions up to, and including, 5.7.25 Description: The issue allows unauthenticated attackers to perform time-based SQL Injecti...

Farm Management System SQL注入漏洞

Farm Management System is a farm management system. A SQL injection vulnerability exists in Farm Management System version 1.0, which stems from a lack of validation of externally-entered SQL statements in the parameter pigno/breed/reason in the file /quarantine.php?id=3. An attacker could use th...

CVE-2024-37765

Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page...

WordPress WordPress Plugin for Google Maps plugin <= 4.6.1 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Krzysztof Zając in WordPress Plugin WP Maps versions = 4.6.1...

CVE-2024-6419

A vulnerability classified as critical was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file /classes/Master.php?f=savemedicine. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...

Simple Online Bidding System SQL Injection Vulnerability

Simple Online Bidding System is an online bidding system by oretnom23 individual developer. SourceCodester Simple Online Bidding System version 1.0 suffers from a SQL injection vulnerability that originates from the parameter id of the file /admin/ajax.php?action=deleteuser which can lead to SQL...

SeaCMS SQL Injection Vulnerability

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in SeaCMS version 12.9, which stems from the fact that manipulation of the parameter cid using inpu...

Medicine Tracker System SQL Injection Vulnerability

Medicine Tracker System is a drug tracking system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Medicine Tracker System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to an SQL injection...

CVE-2024-3816

Sites managed in S@M CMS Concept Intermedia might be vulnerable to a blind SQL Injection executed using the search bar. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears...

Pool of Bethesda Online Reservation System SQL Injection Vulnerability

Pool of Bethesda Online Reservation System is a swimming pool online reservation system by janobe individual developer. Pool of Bethesda Online Reservation System suffers from a SQL injection vulnerability in the rmtypeid parameter of the controller.php file...