CVE-2023-24763

In the module "Xen Forum" xenforum for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0...

CVE-2023-0979

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MedData MedDataPACS allows SQL Injection.This issue affects MedDataPACS : before 2023-03-03...

PT-2023-16661 · Unknown · Meddatapacs

Name of the Vulnerable Software and Affected Versions: MedDataPACS versions prior to 2023-03-03 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: Fo...

The vulnerability in the trigger_referral.php script of the Gimmie Plugin allows a violator to execute arbitrary SQL queries.

The vulnerability in the triggerratethread.php script of the Gimmie Plugin is related to the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Email Registration SQL注入漏洞

Email Registration is drupalprojects open source an e-mail registration application . Allows users to register and login using their email address. An SQL injection vulnerability exists in Email Registration versions prior to 6.x-1.0, which stems from the fact that manipulation of the parameter...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Xen Forum versions prior to 2.13.0. An attacker exploited the...

PT-2023-9864 · Unknown · Igamingmodules Flashgames

Name of the Vulnerable Software and Affected Versions: iGamingModules flashgames version 1.1.0 Description: A critical issue was found in the software. It affects an unknown function of the file game.php. The manipulation of the lid argument leads to sql injection. This issue can be exploited...

Accruent LLC Maintenance Connection SQL注入漏洞

Accruent LLC Maintenance Connection is a comprehensive work order management, preventive maintenance program and parts inventory solution. A security vulnerability exists in Accruent LLC Maintenance Connection versions 2021 and 2022.2, which stems from an SQL injection during emailing to the work...

Glox Technology Useroam Hotspot SQL注入漏洞

Glox Technology Useroam Hotspot is a hotspot system from Glox Technology. Glox Technology Useroam Hotspot suffers from a SQL injection vulnerability that stems from an unsatisfactory neutralization of the particular element used, resulting in SQL injection...

CVE-2023-23315

The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method stripejsValidationModuleFrontController::initContent has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...

PT-2023-16776 · Sourcecodester · Computer Parts Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Parts Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file processlogin. The manipulation of the user argument leads to SQL injection. It i...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image zoom. A security vulnerability exists in the PrestaShop e-commerce platform prior to version 4.5.5, which stems from the module...

CVE-2023-1099

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

PT-2023-10265 · Unknown · Opencyclecompass Server-Php

Name of the Vulnerable Software and Affected Versions: OpenCycleCompass server-php affected versions not specified Description: A critical issue was found in OpenCycleCompass server-php, where the manipulation of the user argument leads to sql injection. This can be exploited remotely. The issue...

PT-2023-20058 · Unknown · Online Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Online Reviewer Management System version 1.0 Description: An issue was discovered in the Online Reviewer Management System, where a SQL injection can directly issue instructions to the background database system via the "reviewer...

PT-2023-16754 · Sourcecodester · Sourcecodester Online Catering Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Catering Reservation System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online Catering Reservation System. This issue affects the file /reservation/add message.php of the...

CVE-2023-24656

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subject parameter under the Create Ticket function...

CVE-2023-1058

A vulnerability classified as critical has been found in SourceCodester Doctors Appointment System 1.0. This affects an unknown part of the file create-account.php. The manipulation of the argument newemail leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

PT-2023-18862 · Unknown · Art Gallery Management System Project

Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project in PHP version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter in the Admin Login. Recommendations: For version 1.0,...

PT-2023-16720 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical issue affects the processing of the file view category.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated remotely...