DataEase SQL注入漏洞

DataEase is an open source data visualization and analysis tool. It is used to help users quickly analyze data and gain insights into business trends for business improvement and optimization. A SQL injection vulnerability exists in Dataease 1.18.4 and earlier versions, which stems from the keywo...

PT-2023-20035 · Unknown · Faveo Helpdesk

Name of the Vulnerable Software and Affected Versions: Faveo Helpdesk versions 1.0 through 1.11.1 Description: The issue arises from a lack of validation on user input data during the login process. This allows parameters passed from the front end to the back end to be controlled, leading to SQL...

CVE-2023-27034

PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability...

CVE-2023-1590

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file admin/operations/currency.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. Th...

Rebuild SQL注入漏洞

Rebuild is a highly customizable enterprise management system. A security vulnerability exists in Rebuild 3.2.3 and earlier versions, which stems from the discovery of an SQL injection vulnerability contained in the file /project/tasks/list...

Automatic Question Paper Generator System SQL注入漏洞

Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which is caused by unknown code in admin/courses/viewclass.p...

PT-2023-17117 · Rebuild · Rebuild

Name of the Vulnerable Software and Affected Versions: Rebuild versions up to 3.2.3 Description: A critical issue was found in Rebuild, affecting an unknown part of the file /files/list-file, leading to sql injection. The manipulation can be initiated remotely. Recommendations: For versions up to...

CVE-2023-1564

A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/transactions/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which stems from a problem in the file /admin/assign/assign.php, where manipulation of the...

WordPress Plugin Events Made Easy SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop tshirtecommerce version 2.1.4 that stems from. It is possible to...

WordPress Plugin Formidable PRO2PDF SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Plugin Waiting SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Medical Certificate Generator App SQL注入漏洞

Medical Certificate Generator App is a simple web application for medical clinics. A SQL injection vulnerability exists in SourceCodester Medical Certificate Generator App version 1.0, which stems from a problem in the file action.php, where manipulation of the parameter id can lead to sql...

PT-2023-17082 · Sourcecodester · Sourcecodester Medical Certificate Generator App

Name of the Vulnerable Software and Affected Versions: SourceCodester Medical Certificate Generator App version 1.0 Description: A critical issue has been discovered, affecting the action.php file, where the manipulation of the id argument leads to SQL injection. This can be initiated remotely...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop eotags versions prior to 1.3.0, which stems from a vulnerabili...

Moodle SQL注入漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from inadequate validation of configuration file field availability conditions,...

Alphaware Simple E-Commerce System SQL注入漏洞

Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. A SQL injection vulnerability exists in Alphaware Simple E-Commerce System version 1.0, which is caused by incorrect manipulation of the email/password parameter...

PT-2023-16579 · WordPress · Wp Meta Seo

Name of the Vulnerable Software and Affected Versions: WP Meta SEO WordPress plugin versions prior to 4.5.3 Description: The issue is related to a blind SQL Injection vulnerability. It occurs because the plugin does not properly sanitize and escape inputs into SQL queries. This can be exploited b...

E-Commerce System SQL注入漏洞

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. An SQL injection vulnerability exists in E-Commerce System version 1.0, which stems from an incorrect manipulation of the parameter UUSERNAME resulting in sql injection...