CVE-2023-27358

NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

Gescen SQL injection vulnerability

Gescen is an educational platform from the Centros Digitales team in China. Gescen suffers from a SQL injection vulnerability that originates from allowing an attacker to send a specially crafted SQL query to the pass parameter and retrieve all data stored in the database...

PT-2024-24185 · Unknown · Kliqqi-Cms

Name of the Vulnerable Software and Affected Versions: Kliqqi-CMS version 2.0.2 Description: The issue is related to SQL Injection in the load data.php file via the userid parameter. This allows for potential exploitation. Recommendations: For Kliqqi-CMS version 2.0.2, consider restricting access...

NETGEAR ProSAFE security vulnerabilities

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from a SQL injection vulnerability that can be exploited by an attacker to elevate privileges...

NETGEAR ProSAFE security vulnerabilities

NETGEAR ProSAFE Network Management System is a network management system. The NETGEAR ProSAFE Network Management System suffers from a SQL injection vulnerability that originates in the clearAlertByIds function and can be exploited by an attacker to obtain sensitive information or execute arbitra...

NETGEAR ProSAFE security vulnerabilities

NETGEAR ProSAFE Network Management System is a network management system. The NETGEAR ProSAFE Network Management System suffers from a SQL injection vulnerability that originates in the getNodesByTopologyMapSearch function, which can be exploited by an attacker to obtain sensitive information or...

IBM Cognos Controller SQL injection vulnerability

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and creating and managing financial reports. An SQL injection vulnerability exists in IBM Cognos Controller...

CVE-2024-1797

The WP ULike – Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable to SQL Injection via the 'status' and 'id' attributes of the 'wpulikecounter' and 'wpulike' shortcodes in all versions up to, and including, 4.6.9 due to insufficient escaping on the user supplied paramete...

CVE-2024-4309

SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints /user/transaction.php?id=1, /user/credit-debittransaction.php?id=1,/user/viewtransaction. php?id=1 and...

PT-2024-25183 · Unknown · Knowband For Prestashop Autosuggest

Name of the Vulnerable Software and Affected Versions: KnowBand for PrestaShop autosuggest versions prior to 2.0.0 Description: The issue allows an attacker to run arbitrary SQL commands via the AutosuggestSearchModuleFrontController::initContent and...

PT-2024-25180 · Prestaddons · Prestaddons Flashsales

Name of the Vulnerable Software and Affected Versions: Prestaddons flashsales versions 1.9.7 and earlier Description: The issue allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method, potentially leading to unauthorized data access or modification. Recommendations:...

PrestaShop SQL injection vulnerability

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, SMS alerts and product image scaling. A SQL injection vulnerability exists in PrestaShop flashsales 1.9.7 and earlier versions, which originates from allowing an...

Znuny security vulnerabilities

Znuny is a work order system from Znuny Inc. A security vulnerability exists in Znuny that stems from a SQL injection vulnerability in the ID parameter. Affected products and versions: Znuny versions 6.5.1 through 6.5.7, 7.0.1 through 7.0.16...

PrestaShop SQL injection vulnerability

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, short message alerts, and product image scaling. A SQL injection vulnerability exists in PrestaShop mdgiftproduct versions prior to 1.4.1, which originates from...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection due to a particular API endpoint modification by authenticated backoffice users, which allows the inclusion and execution of arbitrary SQL commands without proper sanitization or validation. An attacker can manipulate...

CVE-2024-32706

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Repute info systems ARForms.This issue affects ARForms: from n/a through 6.4...

CVE-2024-4069

A vulnerability, which was classified as critical, was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file search.php. The manipulation of the argument txtSearch leads to sql injection. It is possible to initiate the attack remotely. The...

PT-2024-28994 · Unknown · Kashipara Online Furniture Shopping Ecommerce Website

Name of the Vulnerable Software and Affected Versions: Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description: A critical issue affects the processing of the file prodInfo.php, where the manipulation of the prodId argument leads to sql injection. The attack can be initiated...

Online Furniture Shopping E-commerce Website SQL Injection Vulnerability

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A SQL injection vulnerability exists in the Online Furniture Shopping Ecommerce Website, which is caused by a SQL injection vulnerability in the txtSearch parameter of the search.php...

WordPress WP-Recall plugin <= 16.26.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin WP-Recall versions = 16.26.5...