WordPress Plugin WP: Automatic SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WP Automatic is vulnerable...

PT-2024-22026 · Unknown · Campcodes Online Marriage Registration System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Marriage Registration System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/search.php. The manipulation of the searchdata argument leads to SQL injection. ...

Campcodes Online Job Finder System SQL Injection Vulnerability

Campcodes Online Job Finder System is an online job finder system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which originates from a SQL injection vulnerability in the UESRID parameter of the /admin/user/controller.php file...

Campcodes Online Job Finder System SQL Injection Vulnerability

Campcodes Online Job Finder System is an online job finder system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which originates from a SQL injection vulnerability in the JOBREGID parameter of the /admin/applicants/controller.p...

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

CVE-2023-44091

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pandora FMS on all allows SQL Injection. This ulnerability allowed SQL injections to be made even if authentication failed.This issue affects Pandora FMS: from 700 through 776...

KnowBand Security Breach

KnowBand is a plugin from KnowBand Inc. A security vulnerability exists in KnowBand spinwheel v.3.0.3 and earlier versions, which stems from the presence of a SQL injection vulnerability. The vulnerability can be exploited to elevate privileges and obtain sensitive information via the...

PT-2024-22408 · Knowband · Knowband Spinwheel

Name of the Vulnerable Software and Affected Versions: KnowBand spinwheel versions 3.0.3 and earlier Description: The issue allows a remote attacker to gain escalated privileges and obtain sensitive information via the SpinWheelFrameSpinWheelModuleFrontController::sendEmail method. This is a SQL...

PT-2024-18317 · Gamipress · Gamipress

Name of the Vulnerable Software and Affected Versions: GamiPress versions up to, and including, 6.8.6 Description: The issue concerns a SQL Injection vulnerability via the achievement types attribute of the gamipress earnings shortcode. This vulnerability is due to insufficient escaping on the...

PT-2024-21383 · Netentsec · Netentsec Ns-Asg Application Security Gateway

Name of the Vulnerable Software and Affected Versions: Netentsec NS-ASG Application Security Gateway version 6.3 Description: A critical issue was found in the Netentsec NS-ASG Application Security Gateway. This issue affects the file /vpnweb/index.php?para=index and allows for SQL injection...

PT-2024-21457 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A critical vulnerability has been found in the Campcodes Online Job Finder System, affecting unknown code in the file /admin/vacancy/controller.php. The manipulation of the id/CATEGO...

PT-2024-21492 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A critical issue has been discovered, affecting the /admin/login.php file. The manipulation of the user email argument leads to SQL injection. This issue can be exploited remotely...

PT-2024-21508 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown functionality of the file /admin/category/controller.php. The manipulation of the CATEGORYID argument lead...

Netentsec NS-ASG Application Security Gateway SQL Injection Vulnerability

Netentsec NS-ASG Application Security Gateway is an application security gateway from China Netentsec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from the parameter checkVirtualSiteId in the file /vpnweb/index.php?para=index...

PT-2024-21201 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue allows SQL injection through the /amssplus/modules/book/main/bookdetail group.php endpoint, in multiple parameters. This could enable a remote attacker to send a specially crafted SQL query to the...

PT-2024-21212 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue allows SQL injection through the /amssplus/modules/person/pic show.php endpoint, in the person id parameter. This could enable a remote attacker to send a specially crafted SQL query to the server an...

PT-2024-21307 · Fujian Kelixin · Fujian Kelixin Communication Command/Dispatch Platform

Name of the Vulnerable Software and Affected Versions: Fujian Kelixin Communication Command and Dispatch Platform versions up to 20240318 Description: A critical issue has been found in the Fujian Kelixin Communication Command and Dispatch Platform, affecting an unknown functionality of the file...

Employee Task Management System SQL Injection Vulnerability

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect operation of the parameter adminid that can result in an sql injection...

PT-2024-20812 · Unknown · Magesh-K21 Online-College-Event-Hall-Reservation-System

Name of the Vulnerable Software and Affected Versions: MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /admin/bookdate.php. The manipulation of the room id argument leads to S...

Online-College-Event-Hall-Reservation-System SQL Injection Vulnerability

Online-College-Event-Hall-Reservation-System is an online college event hall reservation system by Magesh K individual developer. Designed to automate the hall booking process to eliminate manual logging and increase efficiency. Online-College-Event-Hall-Reservation-System suffers from a SQL...