PT-2023-29632 · Nexter · Nexter

Name of the Vulnerable Software and Affected Versions: Nexter versions through 2.0.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For versions...

CVE-2023-45379

In the module "Rotator Img" posrotatorimg in versions at least up to 1.1 from PosThemes for PrestaShop, a guest can perform SQL injection...

CVE-2023-5336

The iPanorama 360 – WordPress Virtual Tour Builder plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 1.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

WordPress plugin iPanorama 360 SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2023-31909

Name of the Vulnerable Software and Affected Versions ChatBot plugin for WordPress versions up to, and including, 4.8.9 Description The issue is related to SQL Injection via the strid parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the...

CVE-2023-34210

SQL Injection in create customer group function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to execute arbitrary SQL commands via the ctl00$ContentPlaceHolder1$txtCustSQL parameter...

CVE-2023-45375

In the module "PireosPay" pireospay before version 1.7.10 from 01generator.com for PrestaShop, a guest can perform SQL injection via PireosPayValidationModuleFrontController::postProcess...

Hospital Management System SQL注入漏洞

The Free Hospital Management System is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. The Free Hospital Management System suffers from a SQL injection vulnerability that originates from a lack of validation of the...

FarmBot Web App SQL Injection Vulnerability

FarmBot Web App is a web application. FarmBot Web App prior to version 15.8.4 suffers from an SQL injection vulnerability that stems from the presence of a SQL injection vulnerability that could allow an authenticated attacker to extract arbitrary data from its database, which could lead to...

CVE-2023-45162

Affected 1E Platform versions have a Blind SQL Injection vulnerability that can lead to arbitrary code execution. Application of the relevant hotfix remediates this issue. for v8.1.2 apply hotfix Q23166 for v8.4.1 apply hotfix Q23164 for v9.0.1 apply hotfix Q23169 SaaS implementations on v23.7.1...

SQL Injection

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to SQL Injection through the manipulation of SQL queries. An attacker can execute arbitrary code on the system by injecting malicious SQL commands into...

Adobe Commerce SQL Injection Vulnerability

Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A SQL injection vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from being affected by a SQL injection vulnerability that could allow an attacker authenticated with...

PT-2023-29642 · Unknown · Farmbot-Web-App

Name of the Vulnerable Software and Affected Versions: Farmbot-Web-App versions prior to 15.8.4 Description: The Farmbot-Web-App, a web control interface for the Farmbot farm automation platform, contains an SQL injection vulnerability. This issue allows authenticated attackers to extract arbitra...

CVE-2023-23737

Unauth. SQL Injection SQLi vulnerability in MainWP MainWP Broken Links Checker Extension plugin = 4.0 versions...

PT-2023-31563

Name of the Vulnerable Software and Affected Versions Biltay Technology Procost versions prior to 1390 Description The issue is related to an SQL Injection vulnerability, allowing for improper neutralization of special elements used in an SQL command. This can lead to SQL Injection and Command Li...

Koha SQL Injection Vulnerability

Koha is a Koha organization's system for automated library management and site building. A security vulnerability exists in Koha Library Software version 23.0.5.04 and earlier that could allow a remote attacker to obtain sensitive information via Intranet/cgi bin/cataloging/ysearch.pl...

PT-2023-10303 · Unknown · Easy2Map Photos Plugin

Name of the Vulnerable Software and Affected Versions: Easy2Map Photos Plugin version 1.0.1 Description: A critical issue was found in the Easy2Map Photos Plugin, allowing for sql injection through unknown code. The manipulation can be initiated remotely. It is estimated that an unknown number of...

CVE-2023-40920

Prixan prixanconnect up to v1.62 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::importProducts...

CVE-2023-5423

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirmorder. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely...

PT-2023-32074 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical vulnerability has been found in the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to...