Alisonic Sibylla SQL注入漏洞

Alisonic Sibylla is an automated fuel tank metering service station from Alisonic. The Alisonic Sibylla suffers from a SQL injection vulnerability that stems from the device's susceptibility to SQL injection attacks, which could allow full access to the database...

CVE-2024-8630: Improper Neutralization of Special Elements used in an SQL Command

Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database...

Alisonic Sibylla

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Alisonic Equipment: Sibylla Vulnerability: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' 2. RISK EVALUATION Successful exploitation of this vulnerability...

PT-2024-39144 · Unknown · Alisonic Sibylla

Name of the Vulnerable Software and Affected Versions: Alisonic Sibylla affected versions not specified Description: The issue concerns SQL injection attacks, which could allow complete access to the database. Attackers can remotely compromise databases. There is no information provided about the...

SQL Injection Vulnerability in UFIDA U8CRM of UFIDA Network Technology Co. Ltd (CNVD-2024-43219)

UFIDA U8CRM is a professional enterprise-level CRM software designed to help companies efficiently manage customer relationships, improve sales performance and provide quality customer service. A SQL injection vulnerability exists in UFIDA U8CRM, which can be exploited by attackers to obtain...

CVE-2024-42404

SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database...

SQL Injection Vulnerability in UFIDA Nccloud of UFIDA Network Technology Co. Ltd (CNVD-2024-43465)

UFIDA Nccloud is a digitalization platform for large enterprises. A SQL injection vulnerability exists in UFIDA Nccloud, which can be exploited by attackers to gain access to sensitive database information...

WordPress plugin Welcart e-Commerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

CVE-2024-42404: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database...

CVE-2024-45537

Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...

PT-2024-30831 · Unknown · Spiffy Calendar

Name of the Vulnerable Software and Affected Versions: Spiffy Calendar versions through 4.9.12 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2024-30869

Name of the Vulnerable Software and Affected Versions WPCargo Track & Trace versions prior to 8.0.2 Description Improper neutralization of special elements used in an SQL command allows for SQL injection. This issue enables attackers to remotely manipulate the database. Recommendations Update to ...

SQL Injection Vulnerability in UFIDA U8CRM of UFIDA Network Technology Co. Ltd (CNVD-2024-41602)

UFIDA U8CRM is a professional enterprise-level CRM software designed to help companies efficiently manage customer relationships, improve sales performance and provide quality customer service. A SQL injection vulnerability exists in UFIDA U8CRM, which can be exploited by attackers to obtain...

CVE-2024-27113

An unauthenticated Insecure Direct Object Reference IDOR to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database by exporting it as a CSV file. The vulnerability...

CVE-2024-27112

A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database. The vulnerability has been remediated in version 1.52.02...

CVE-2024-27113

An unauthenticated Insecure Direct Object Reference IDOR to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database by exporting it as a CSV file. The vulnerability...

CVE-2024-27112

A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database. The vulnerability has been remediated in version 1.52.02...

SOPlanning 安全漏洞

SOPlanning is a suite of online project management software from SOPlanning. A security vulnerability exists in SOPlanning. An attacker exploiting the vulnerability could access the underlying database...

CVE-2024-27112: Improper Neutralization of Special Elements used in an SQL Command

A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database. The vulnerability has been remediated in version 1.52.02...

PT-2024-21654

Name of the Vulnerable Software and Affected Versions SO Planning tool versions prior to 1.52.02 Description A SQL Injection issue has been found in the SO Planning tool when the public view setting is enabled, allowing an attacker to gain access to the underlying database. Recommendations For...