Vulnerabilities fixed in Nagios XI

Nagios has fixed vulnerabilities in Nagios XI. A malicious party can exploit the vulnerabilities to use SQL injection, or through a Cross-Site-Scripting XSS attack execute arbitrary code with the victim's privileges, or to gain access to system data. Nagios has released updates to fix the...

CVE-2023-37177

SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/exportz3950.php endpoint...

SLiMS 9 Bulian Security Vulnerability

SLiMS 9 Bulian is a free and open source software from the SLiMS community in Indonesia. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A security vulnerability exists in SLiMS 9 Bulian version v9.6.1, which stems fro...

Employee Management System Security Vulnerability

Employee Management System is an employee management system. A security vulnerability exists in Employee Management System version v.1.0. An attacker can exploit this vulnerability to perform SQL injection attacks...

PT-2024-19049 · Zoho · Zoho Manageengine Exchange Reporter Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Exchange Reporter Plus versions 5714 and below Description: The issue is related to an Authenticated SQL injection in the report exporting feature. Recommendations: For Zoho ManageEngine Exchange Reporter Plus versions 5714...

CVE-2023-5155

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Utarit Information Technologies SoliPay Mobile App allows SQL Injection.This issue affects SoliPay Mobile App: before 5.0.8...

EC-WEB FS-EZViewer SQL Injection Vulnerability

EC-WEB FS-EZViewer is an online document viewing application. EC-WEB FS-EZViewer suffers from a SQL injection vulnerability that stems from a lack of proper restrictions on user input. A remote attacker could use this vulnerability to inject SQL commands to read, modify, and delete database recor...

ECShop SQL Injection Vulnerability

ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall, source code free download experience, suitable for enterprise development and build mall. ECShop 4.1.8 version of the existence of SQL injection vulnerability ,...

EBM Technologies Uniweb SQL Injection Vulnerability

EBM Technologies Uniweb is a zero footprint universal viewer from EBM Technologies that works in any web browser and supports viewing DICOM and non-DICOM data. An SQL injection vulnerability exists in the EBM Technologies Uniweb/SoliPACS WebServer, which stems from the query function lacking prop...

CVE-2024-25215

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

Expense Tracker SQL Injection Vulnerability

Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in Simple Expense Tracker v1.0, which originates from a SQL injection vulnerability in the file /endpoint/deletecategory.php...

PT-2024-20818 · Unknown · Barangay Population Monitoring System

Name of the Vulnerable Software and Affected Versions: Barangay Population Monitoring System version 1.0 Description: The system contains a SQL injection vulnerability via the resident parameter at the "/endpoint/delete-resident.php" endpoint. This issue allows for potential exploitation...

Budibase Simple Admin Panel App SQL Injection Vulnerability

Budibase Simple Admin Panel App is a simple application from Budibase UK. It allows users to manipulate databases from a front-end interface. A security vulnerability exists in Budibase Simple Admin Panel App v1.0, which originates from a SQL injection vulnerability in the file...

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. Employee Managment System v1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /aprocess.php...

UNI-PA University Information System SQL Injection Vulnerability

The UNI-PA University Information System is a university information system from UNI-PA. A SQL injection vulnerability exists in versions of the UNI-PA University Information System prior to 12.12.2023 that stems from incorrect neutralization of special elements...

Gambio SQL Injection Vulnerability

Gambio is an all-in-one e-commerce solution from Gambio, Inc. A SQL injection vulnerability exists in Gambio 4.9.2.0 and earlier versions, which stems from a vulnerability that allows an attacker to run arbitrary SQL commands using a crafted GET request via the attribute parameter...

PT-2024-15675 · WordPress · The Awesome Support – Wordpress Helpdesk & Support Plugin

Name of the Vulnerable Software and Affected Versions: The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress versions up to, and including, 6.1.7 Description: The issue is related to a union-based SQL Injection vulnerability via the q parameter of the wpas get users actio...

CVE-2023-6677

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Financial Technology Online Collection allows SQL Injection. This issue affects Online Collection: before v.1.0.2...

CVE-2024-25308

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacherlogin.php...

CVE-2023-50026

SQL injection vulnerability in Presta Monster "Multi Accessories Pro" hsmultiaccessoriespro module for PrestaShop versions 5.1.1 and before, allows remote attackers to escalate privileges and obtain sensitive information via the method HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts...