CVE-2022-34953

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php...

Pligg CMS SQL注入漏洞

Pligg CMS is a content management system by Berteh Personal Developers. A security vulnerability exists in Pligg CMS version v2.0.2, which stems from a security issue with the pagesize parameter in loaddataforgroups.php...

Pharmacy Management System SQL注入漏洞

Pharmacy Management System MPMS is a multilingual pharmacy management system from the personal developer Mayuri K. A SQL injection vulnerability exists in Pharmacy Management System v1.0, which stems from a lack of validation of external input SQL in the id parameter of edituser.php statements. A...

PT-2022-22450 · Unknown · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version 1.0 Description: A SQL injection issue was found in the Pharmacy Management System. The vulnerability can be exploited via the startDate parameter at the "getsalereport.php" endpoint. Recommendations: For...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A SQL injection vulnerability exists in PrestaShop versions 1.6.0.10 through 1.7.8.6, which stems from a...

CVE-2022-22280

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics On-Prem 2.5.0.3-2520 and earlier versions...

CVE-2022-2577

A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument id with the input -2'%20UNION%20select%2011,user,333,444--+ leads to sql injection. The attack can b...

CVE-2022-1277

Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability...

Inavitas Solar SQL注入漏洞

Inavitas Solar is a complete management system for solar power plant operators and investors from Inavitas Turkey. A security vulnerability exists in the Inavitas Solar Log product that allows an unauthenticated attacker to perform SQL injection...

CVE-2022-34067

Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter...

Fruits Bazar SQL注入漏洞

Fruits Bazar is an e-commerce project using Php, javaScript, Jquery and Mysql by Md. Saiful Islam, an individual developer from Bangladesh. A SQL injection vulnerability exists in Fruits Bazar v1.0, which stems from a security issue with the recoveremail parameter in userpasswordrecover.php, whic...

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in version 1.0 of the Online Fire Reporting System due to a security issue with the date parameter in the node app, which can be exploited by an attacker...

PT-2022-20969 · Unknown · Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.0 Description: The issue concerns SQL Injection via the date parameter. This allows for potential manipulation of database queries, which could lead to unauthorized data access or modification...

Django: SQL injection via QuerySet.explain(options) on PostgreSQL

A flaw was found in the Django package, leading to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely...

CVE-2022-27613

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in webapi component in Synology CardDAV Server before 6.0.10-0153 allows remote authenticated users to inject SQL commands via unspecified vectors...

GHSA-VJMR-6PMM-RPRF Dataease v1.11.1 SQL Injection via parameter dataSourceId

Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId. Version 1.11.2 contains a fix...

CVE-2017-20143

A vulnerability, which was classified as critical, has been found in Itech Movie Portal Script 7.36. This issue affects some unknown processing of the file /film-rating.php. The manipulation of the argument v leads to sql injection Error. The attack may be initiated remotely. The exploit has been...

CVE-2017-20139

A vulnerability was found in Itech Movie Portal Script 7.36. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /shownews.php. The manipulation of the argument id with the input AND SELECT 1222 FROMSELECT COUNT,CONCAT0x71786b7a71,SELECT...

CVE-2022-2137

The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an unauthorized attacker to disclose information...

SonicWALL Analytics On-Prem SQL注入漏洞

SonicWALL Analytics is a high-performance management and reporting engine for the Web from SonicWALL, Inc. A SQL injection vulnerability exists in SonicWALL Analytics On-Prem 2.5.0.3-2520 and prior versions, which stems from incorrect neutralization of special elements used in SQL commands...