Employee Management System Security Vulnerability

Employee Management System is an employee management system. A security vulnerability exists in Employee Management System version v.1.0. An attacker can exploit this vulnerability to perform SQL injection attacks...

PT-2024-19049 · Zoho · Zoho Manageengine Exchange Reporter Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Exchange Reporter Plus versions 5714 and below Description: The issue is related to an Authenticated SQL injection in the report exporting feature. Recommendations: For Zoho ManageEngine Exchange Reporter Plus versions 5714...

CVE-2023-5155

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Utarit Information Technologies SoliPay Mobile App allows SQL Injection.This issue affects SoliPay Mobile App: before 5.0.8...

ECShop SQL Injection Vulnerability

ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall, source code free download experience, suitable for enterprise development and build mall. ECShop 4.1.8 version of the existence of SQL injection vulnerability ,...

EC-WEB FS-EZViewer SQL Injection Vulnerability

EC-WEB FS-EZViewer is an online document viewing application. EC-WEB FS-EZViewer suffers from a SQL injection vulnerability that stems from a lack of proper restrictions on user input. A remote attacker could use this vulnerability to inject SQL commands to read, modify, and delete database recor...

EBM Technologies Uniweb SQL Injection Vulnerability

EBM Technologies Uniweb is a zero footprint universal viewer from EBM Technologies that works in any web browser and supports viewing DICOM and non-DICOM data. An SQL injection vulnerability exists in the EBM Technologies Uniweb/SoliPACS WebServer, which stems from the query function lacking prop...

CVE-2024-25215

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

PT-2024-20818 · Unknown · Barangay Population Monitoring System

Name of the Vulnerable Software and Affected Versions: Barangay Population Monitoring System version 1.0 Description: The system contains a SQL injection vulnerability via the resident parameter at the "/endpoint/delete-resident.php" endpoint. This issue allows for potential exploitation...

Expense Tracker SQL Injection Vulnerability

Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in Simple Expense Tracker v1.0, which originates from a SQL injection vulnerability in the file /endpoint/deletecategory.php...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. Employee Managment System v1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /aprocess.php...

Budibase Simple Admin Panel App SQL Injection Vulnerability

Budibase Simple Admin Panel App is a simple application from Budibase UK. It allows users to manipulate databases from a front-end interface. A security vulnerability exists in Budibase Simple Admin Panel App v1.0, which originates from a SQL injection vulnerability in the file...

UNI-PA University Information System SQL Injection Vulnerability

The UNI-PA University Information System is a university information system from UNI-PA. A SQL injection vulnerability exists in versions of the UNI-PA University Information System prior to 12.12.2023 that stems from incorrect neutralization of special elements...

Gambio SQL Injection Vulnerability

Gambio is an all-in-one e-commerce solution from Gambio, Inc. A SQL injection vulnerability exists in Gambio 4.9.2.0 and earlier versions, which stems from a vulnerability that allows an attacker to run arbitrary SQL commands using a crafted GET request via the attribute parameter...

PT-2024-15675 · WordPress · The Awesome Support – Wordpress Helpdesk & Support Plugin

Name of the Vulnerable Software and Affected Versions: The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress versions up to, and including, 6.1.7 Description: The issue is related to a union-based SQL Injection vulnerability via the q parameter of the wpas get users actio...

CVE-2023-6677

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Financial Technology Online Collection allows SQL Injection. This issue affects Online Collection: before v.1.0.2...

CVE-2024-25308

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacherlogin.php...

CVE-2023-50026

SQL injection vulnerability in Presta Monster "Multi Accessories Pro" hsmultiaccessoriespro module for PrestaShop versions 5.1.1 and before, allows remote attackers to escalate privileges and obtain sensitive information via the method HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts...

Oduyo Online Collection Software SQL Injection Vulnerability

Oduyo Online Collection Software is a software from Oduyo, Inc. A SQL injection vulnerability exists in versions of Oduyo Online Collection Software prior to v.1.0.2, which stems from incorrect neutralization of a special element...

Simple School Managment System SQL注入漏洞

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statement , an attacker can exploit the...

Prestashop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A SQL injection vulnerability exists in Prestashop boostmyshopagent version 1.1.9 and...