IBOS SQL injection vulnerability

IBOS is a collaborative office management system. An SQL injection vulnerability exists in IBOS OA version 4.5.5, which stems from the fact that the file ?r=article/category/del causes sql injection...

Wifi Soft Unibox Administration SQL Injection Vulnerability

Wifi Soft Unibox Administration is a smart access controller and hotspot gateway from Wifi Soft USA. It provides complete control over wired and wireless networks. A SQL injection vulnerability exists in Wifi Soft Unibox Administration versions 3.0 and 3.1, which originates from unverified or...

CVE-2023-25838

There is SQL injection vulnerability in Esri ArcGIS Insights 2022.1 for ArcGIS Enterprise and that may allow a remote, authorized attacker to execute arbitrary SQL commands against the back-end database. The effort required to generate the crafted input required to exploit this issue is complex a...

CVE-2023-3751

A vulnerability was found in Super Store Finder 3.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component POST Parameter Handler. The manipulation of the argument products leads to sql injection. The attack can be...

Esri ArcGIS Insights Desktop SQL injection vulnerability

Esri ArcGIS Insights Desktop is a data analysis workbench from Environmental Systems Research Institute Esri, Inc. A SQL injection vulnerability exists in Esri ArcGIS Insights Desktop version 2022.1 Windows, Mac that originates from a vulnerability that allows a locally-authorized attacker to...

CVE-2021-37522

SQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 allows remote attackers to run arbitrary SQL commands via crafted string to /src/db.js, /commands/mute.js, /modules/event/messageDelete.js...

Super Store Finder SQL Injection Vulnerability

Super Store Finder is an easy to use Google Maps API store finder program Super Store Finder by Super Store Finder. A SQL injection vulnerability exists in Super Store Finder version 3.6, which stems from an incorrect manipulation of the parameter products that can lead to sql injection...

CVE-2023-2963

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oliva Expertise Oliva Expertise EKS allows SQL Injection.This issue affects Oliva Expertise EKS: before 1.2...

PT-2023-21240 · Taphome · Taphome

Name of the Vulnerable Software and Affected Versions: TapHome versions prior to 2023.2 Description: An SQL injection issue exists in the HandleMessageUpdateDevicePropertiesRequest function, allowing low-privileged users to inject arbitrary SQL directives into an SQL query. This enables the...

TapHome SQL Injection Vulnerability

TapHome is a smart home system that you can tweak yourself by TapHome Slovakia. A SQL injection vulnerability exists in TapHome versions prior to 2023.2. The vulnerability stems from the presence of a SQL injection vulnerability that allows a low-privileged user to execute arbitrary SQL commands...

Bylancer QuickQR SQL Injection Vulnerability

Bylancer QuickQR is a QR code restaurant menu maker from Bylancer. A SQL injection vulnerability exists in Bylancer QuickQR version 6.3.7, which stems from the presence of an unknown function in the blog in the component GET Parameter Handler, which leads to sql injection via parameter s. The...

PT-2023-25734 · Unknown · Bylancer Quickjob

Name of the Vulnerable Software and Affected Versions: Bylancer QuickJob version 6.1 Description: A critical vulnerability has been found in the component GET Parameter Handler. The manipulation of the keywords/gender argument leads to sql injection. It is possible to launch the attack remotely...

Bylancer QuickVCard SQL Injection Vulnerability

Bylancer QuickVCard is a Digital Business Card SaaS PHP script from Bylancer. A SQL injection vulnerability exists in Bylancer QuickVCard version 2.1, which stems from some unknown handling of the file /blog in the component GET Parameter Handler, which leads to an sql injection via the parameter...

Lost and Found Information System SQL Injection Vulnerability

Lost and Found Information System is a lost and found information system by the individual developer of oretnom23. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which originates from the parameter id of the file /classes/Master.php?f=saveitem that can lead...

PT-2023-25699 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Lost and Found Information System. This issue affects the component HTTP POST Request Handler, specificall...

CVE-2023-30151

A SQL injection vulnerability in the Boxtal envoimoinscher module for PrestaShop, after version 3.1.10, allows remote attackers to execute arbitrary SQL commands via the key GET parameter...

CVE-2023-3658

A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file Master.php?f=deletebook of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is...

GLPI SQL injection vulnerability

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

Online Piggery Management System SQL Injection Vulnerability

Online Piggery Management System is an online pig management system by Lewa Personal Developer. A security vulnerability exists in Online Piggery Management System version 1.0 that stems from vulnerability to SQL injection attacks...

Schneider Electric StruxureWare Data Center Expert SQL Injection Vulnerability

Schneider Electric StruxureWare Data Center Expert StruxureWare Data Center Management Expert is a monitoring software from the French company Schneider Electric Schneider Electric. Suitable for a variety of organizations to monitor their company-wide power, cooling, security, environment. A SQL...