CVE-2022-48585

A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

ScienceLogic SL1 SQL Injection Vulnerability

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A security vulnerability exists in ScienceLogic SL1 version 11.1.2 and prior versions that stems from the logging export feature not filtering user inp...

ScienceLogic SL1 SQL injection vulnerability

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

CVE-2023-38768

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.php...

CVE-2023-3386

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection.This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-38769

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within the /QueryView.php...

CVE-2023-37688

Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Admin page...

CVE-2023-3716

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection.This issue affects Online Collection Software: before 1.0.1...

CVE-2023-3716

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection. This issue affects Online Collection Software: before 1.0.1...

PT-2023-26595 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.0.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the value and custom parameters within the "/QueryView.php" API endpoint. Recommendations: For ChurchCRM version 5.0.0, as...

PT-2023-28291 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctors Appointment System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file login.php. The manipulation of the useremail argument leads to sql injection. Thi...

ChurchCRM SQL injection vulnerability

ChurchCRM is an open source CRM system for churches. ChurchCRM version v5.0.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the friendmonths parameter in QueryView.php. An attacker can exploit this vulnerability to execute...

ChurchCRM SQL Injection Vulnerability

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version v.5.0.0 that stems from the presence of a SQL injection vulnerability...

ChurchCRM SQL Injection Vulnerability

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version v.5.0.0 that stems from the presence of a SQL injection vulnerability...

ChurchCRM SQL Injection Vulnerability

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version v.5.0.0 that stems from the presence of a SQL injection vulnerability...

Maid Hiring Management System Cross-Site Scripting Vulnerability

PHPGurukul Maid Hiring Management System is a maid hiring management system from PHPGurukul, USA. A security vulnerability exists in Maid Hiring Management System v1.0, which is caused by a SQL injection vulnerability in the Admin page...

Siemens RUGGEDCOM CROSSBOW SQL injection vulnerability

RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP compliant access to smart electronic devices. Siemens RUGGEDCOM CROSSBOW suffers from a SQL injection vulnerability that can be exploited by an attacker to execute arbitrary SQL queries on the server database...

CVE-2023-38044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-34476

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

PT-2023-19181 · Bestaddon.Com +1 · Ba Gallery Component For Joomla +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for SQL...