PT-2023-26197 · Unknown · Bug Finder Chaincity Real Estate Investment Platform

Name of the Vulnerable Software and Affected Versions: Bug Finder ChainCity Real Estate Investment Platform version 1.0 Description: A critical vulnerability was found in the Bug Finder ChainCity Real Estate Investment Platform. The issue affects an unknown functionality of the file /property of...

CVE-2023-25838

There is SQL injection vulnerability in Esri ArcGIS Insights 2022.1 for ArcGIS Enterprise and that may allow a remote, authorized attacker to execute arbitrary SQL commands against the back-end database. The effort required to generate the crafted input required to exploit this issue is complex a...

CVE-2023-3751

A vulnerability was found in Super Store Finder 3.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component POST Parameter Handler. The manipulation of the argument products leads to sql injection. The attack can be...

Esri ArcGIS Insights Desktop SQL注入漏洞

Esri ArcGIS Insights Desktop is a data analysis workbench from Environmental Systems Research Institute Esri, Inc. A SQL injection vulnerability exists in Esri ArcGIS Insights Desktop version 2022.1 Windows, Mac that originates from a vulnerability that allows a locally-authorized attacker to...

CVE-2021-37522

SQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 allows remote attackers to run arbitrary SQL commands via crafted string to /src/db.js, /commands/mute.js, /modules/event/messageDelete.js...

Super Store Finder SQL注入漏洞

Super Store Finder is an easy to use Google Maps API store finder program Super Store Finder by Super Store Finder. A SQL injection vulnerability exists in Super Store Finder version 3.6, which stems from an incorrect manipulation of the parameter products that can lead to sql injection...

CVE-2023-2963

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oliva Expertise Oliva Expertise EKS allows SQL Injection.This issue affects Oliva Expertise EKS: before 1.2...

TapHome SQL注入漏洞

TapHome is a smart home system that you can tweak yourself by TapHome Slovakia. A SQL injection vulnerability exists in TapHome versions prior to 2023.2. The vulnerability stems from the presence of a SQL injection vulnerability that allows a low-privileged user to execute arbitrary SQL commands...

PT-2023-21240 · Taphome · Taphome

Name of the Vulnerable Software and Affected Versions: TapHome versions prior to 2023.2 Description: An SQL injection issue exists in the HandleMessageUpdateDevicePropertiesRequest function, allowing low-privileged users to inject arbitrary SQL directives into an SQL query. This enables the...

Bylancer QuickQR SQL注入漏洞

Bylancer QuickQR is a QR code restaurant menu maker from Bylancer. A SQL injection vulnerability exists in Bylancer QuickQR version 6.3.7, which stems from the presence of an unknown function in the blog in the component GET Parameter Handler, which leads to sql injection via parameter s. The...

Bylancer QuickVCard SQL注入漏洞

Bylancer QuickVCard is a Digital Business Card SaaS PHP script from Bylancer. A SQL injection vulnerability exists in Bylancer QuickVCard version 2.1, which stems from some unknown handling of the file /blog in the component GET Parameter Handler, which leads to an sql injection via the parameter...

PT-2023-25734 · Unknown · Bylancer Quickjob

Name of the Vulnerable Software and Affected Versions: Bylancer QuickJob version 6.1 Description: A critical vulnerability has been found in the component GET Parameter Handler. The manipulation of the keywords/gender argument leads to sql injection. It is possible to launch the attack remotely...

Lost and Found Information System SQL注入漏洞

Lost and Found Information System is a lost and found information system by the individual developer of oretnom23. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which originates from the parameter id of the file /classes/Master.php?f=saveitem that can lead...

PT-2023-25699 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Lost and Found Information System. This issue affects the component HTTP POST Request Handler, specificall...

CVE-2023-30151

A SQL injection vulnerability in the Boxtal envoimoinscher module for PrestaShop, after version 3.1.10, allows remote attackers to execute arbitrary SQL commands via the key GET parameter...

CVE-2023-3658

A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file Master.php?f=deletebook of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is...

GLPI SQL注入漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

PT-2024-3805

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.27 Description Cacti provides an operational monitoring and fault management framework. A SQL injection vulnerability in the automation get new graphs sql function of api automation.php allows authenticated users to...

Schneider Electric StruxureWare Data Center Expert SQL注入漏洞

Schneider Electric StruxureWare Data Center Expert StruxureWare Data Center Management Expert is a monitoring software from the French company Schneider Electric Schneider Electric. Suitable for a variety of organizations to monitor their company-wide power, cooling, security, environment. A SQL...

Online Piggery Management System SQL注入漏洞

Online Piggery Management System is an online pig management system by Lewa Personal Developer. A security vulnerability exists in Online Piggery Management System version 1.0 that stems from vulnerability to SQL injection attacks...