CVE-2022-40615

IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 236208...

PT-2023-10146 · Unknown · Noxxienl Criminals

Name of the Vulnerable Software and Affected Versions: NoxxieNl Criminals affected versions not specified Description: A critical issue was found in NoxxieNl Criminals, affecting an unknown function of the file ingame/roulette.php. The manipulation of the gambleMoney argument leads to sql...

Dynamic Transaction Queuing System SQL injection vulnerabilities

Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, an individual developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0. An attacker can exploit this vulnerability to perform a SQL injection attack via...

Web-Cyradm SQL injection vulnerability

web-cyradm is web-cyradm open source a web-based software. web-cyradm has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter login/loginpassword/LANG leads to sql injection...

Twmap SQL injection vulnerability

Twmap is a Taiwan map related document/code in China. Twmap suffers from a SQL injection vulnerability that originates from an unknown function in the file twmap3/data/ajaxCRUD/pointdata2.php, where manipulation of the parameter id results in SQL injection...

PT-2023-10332 · Forumhulp · Forumhulp

Name of the Vulnerable Software and Affected Versions: ForumHulp affected versions not specified Description: A critical issue was found in ForumHulp searchresults, affecting the list keywords function of the file event/listener.php. The manipulation of the word argument leads to SQL injection...

Flairbot SQL injection vulnerability

flairbot is an application for tiredtyrant individual developers. It is used to manage non-reddit users. A SQL injection vulnerability exists in flairbot. An attacker could exploit this vulnerability to perform a sql injection attack...

PT-2023-12876 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Loan Management System, affecting the file login.php. The manipulation of the username argument leads to...

Piwigo SQL injection vulnerability

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo Piwigo-Guest-Book version 1.3.0 and earlier versions suffer from a SQL injection vulnerability that stems from incorrect...

CVE-2022-43519

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

CVE-2022-43521

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

DevNewsAggregator SQL Injection Vulnerability

DevNewsAggregator is a development news aggregator by Steve Jagodzinski Personal Developer. DevNewsAggregator suffers from a SQL injection vulnerability that stems from a problem with the function getByName in the file php/dataaccess/RemoteHtmlContentDataAccess.php, where manipulation of the...

Aruba Networks EdgeConnect Enterprise Orchestrator SQL Injection Vulnerability

Aruba Networks EdgeConnect Enterprise Orchestrator is a centralized SD-WAN management solution from Aruba Networks, Inc. It provides optimization, management, automation, and real-time visibility and monitoring features for enterprise users. A security vulnerability exists in Aruba Networks...

PT-2023-10115 · Meol1 · Meol1

Name of the Vulnerable Software and Affected Versions: meol1 affected versions not specified Description: A critical issue has been found in meol1, affecting the GetAnimal function of the file opdracht4/index.php. The manipulation of the where argument leads to SQL injection. Recommendations: App...

Web-Cyradm SQL injection vulnerability

web-cyradm is web-cyradm open source a web-based software. web-cyradm has a SQL injection vulnerability that stems from a problem in the unknown section of the file search.php, where manipulation of the parameter searchstring can lead to sql injection...

CVE-2022-38627

Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL injection vulnerability via the idt parameter...

CVE-2022-4360

The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

PT-2023-14165 · WordPress · Wp Autocomplete Search

Name of the Vulnerable Software and Affected Versions: WP AutoComplete Search WordPress plugin versions 1.0.4 and earlier Description: The issue arises from the plugin's failure to sanitise and escape a parameter before using it in a SQL statement via an AJAX endpoint available to unauthenticated...

WordPress plugin Quote-O-Matic has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2023-14308 · WordPress · Quote-O-Matic

Name of the Vulnerable Software and Affected Versions: Quote-O-Matic WordPress plugin versions 1.0.0 through 1.0.5 Description: The issue is related to a SQL injection that occurs because a parameter is not properly sanitized and escaped before being used in a SQL statement. This can be exploited...