10209 matches found
Online Restaurant Management System SQL注入漏洞
Online Restaurant Management System is a Code-projects open source online restaurant management system. A security vulnerability exists in Code-projects Online Restaurant Management System version 1.0, which allows an attacker to bypass the administration panel and view order history, add product...
CVE-2023-3624
A vulnerability classified as critical has been found in Nesote Inout Blockchain FiatExchanger 3.0. This affects an unknown part of the file /index.php/coins/updatemarketboxslider of the component POST Parameter Handler. The manipulation of the argument marketcurrency leads to sql injection. It i...
PT-2023-25480 · Ibos Oa · Ibos Oa
Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue has been found, affecting the createDeleteCommand function of the ?r=article/default/delete file in the Delete Packet component. This issue leads to SQL injection and can be exploited...
Dynacase Webdesk SQL注入漏洞
Dynacase Webdesk is the operator interface for Dynacase Platform. An SQL injection vulnerability exists in versions prior to Dynacase Webdesk 3.2-20180305, which stems from the function Freedomrsssearch in the file Freedomrsssearch.php that can lead to sql injection...
CVE-2023-3534
A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file checkavailability.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...
PT-2023-24443 · Unknown · Ai-Dev Aicombinationsonfly
Name of the Vulnerable Software and Affected Versions: ai-dev aicombinationsonfly versions prior to 0.3.1 Description: The issue is a SQL injection vulnerability. It affects the component /includes/ajax.php. Recommendations: For versions prior to 0.3.1, update to version 0.3.1 or later to resolve...
CVE-2023-3528
A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument catid leads to sql injection. The attack may be launched remotely. The identifier of this...
CVE-2023-3478
A vulnerability classified as critical was found in IBOS OA 4.5.5. Affected by this vulnerability is the function actionEdit of the file ?r=dashboard/roleadmin/edit&op=member of the component Add User Handler. The manipulation of the argument id leads to sql injection. The attack can be launched...
CVE-2023-34735
Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection...
CVE-2023-34735
Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection...
Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code Execution
Multiple SQL injection vulnerabilities have been disclosed in Gentoo Soko that could lead to remote code execution RCE on vulnerable systems. "These SQL injections happened despite the use of an Object-Relational Mapping ORM library and prepared statements," SonarSource researcher Thomas...
WordPress plugin FormCraft Premium SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...
PT-2023-21128 · WordPress · Erp
Name of the Vulnerable Software and Affected Versions: ERP WordPress plugin versions prior to 1.12.4 Description: The issue concerns a SQL injection problem. It occurs because the type parameter in the "erp/v1/accounting/v1/people" REST API endpoint is not properly sanitized and escaped before...
Lenovo XClarity Administrator SQL注入漏洞
Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The product provides agentless hardware management for servers, storage, network switches, and more. A security vulnerability exists in Lenovo XClarity Administrator that stems from an SQL injecti...
PT-2023-24600 · Unknown · Campcodes Retro Cellphone Online Store
Name of the Vulnerable Software and Affected Versions: Campcodes Retro Cellphone Online Store version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file /admin/index.php. The manipulation of the username and password arguments leads to...
Campcodes Retro Cellphone Online Store SQL注入漏洞
Campcodes Retro Cellphone Online Store is a retro cellphone online store by Campcodes. A SQL injection vulnerability exists in Campcodes Retro Cellphone Online Store version 1.0, which stems from the presence of unknown functionality in admin/index.php, which leads to sql injection via the...
CVE-2023-34600
Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection...
OpenCart SQL注入漏洞
OpenCart is an open source online shopping system that allows you to build your own online store. The system is simple and easy to use and supports all kinds of data import and export , including product information , user orders , products and so on. Through OpenCart users can easily complete th...
CVE-2023-2719
The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the id parameter for an Agent in the REST API before using it in an SQL statement, leading to an SQL Injection exploitable by users with a role as low as Subscriber...