PT-2024-17634 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.10 Description: A critical vulnerability has been found in Tongda OA. The issue affects an unknown function of the file /general/email/outbox/delete.php. The manipulation of the DELETE STR argument leads to SQ...

CVE-2023-48792

Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option...

ManageEngine SQL Injection Vulnerability

ManageEngine is a family of IT management solutions from ManageEngine, Inc. A security vulnerability exists in ManageEngine ADAudit Plus 7270 and prior versions that stems from vulnerability to authenticated SQL injection attacks...

PT-2024-15413 · Manageengine · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine ADAudit Plus versions 7270 and below Description: The issue is related to an Authenticated SQL injection in the home Graph-Data of ManageEngine ADAudit Plus. Recommendations: For ManageEngine ADAudit Plus versions 7270 and below,...

ZOHO ManageEngine ADAudit Plus SQL Injection Vulnerability

ZOHO ManageEngine ADAudit Plus is used by ZOHO to simplify auditing, demonstrate compliance and detect threats. A SQL injection vulnerability exists in ZOHO ManageEngine ADAudit Plus prior to Build 7271, which stems from a vulnerability in the aggregate report feature that is susceptible to SQL...

Wanhu ezOFFICE SQL Injection Vulnerability

Wanhu ezOFFICE is a comprehensive office suite software from Wanhu, a Chinese company. A SQL injection vulnerability exists in Wanhu ezOFFICE version 11.1.0, which originates in defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp, which contains unknown processing that can lead to SQL...

WordPress plugin InstaWP Connect SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

facileManager SQL注入漏洞

facileManager is a suite of modular Web applications from facileManager, Inc. facileManager suffers from an SQL injection vulnerability that originates from an unsafe call to the extract function in admin-logs.php. An attacker can use this vulnerability to view, add, modify, or delete information...

PT-2024-16042 · Wanhu · Wanhu Ezoffice

Name of the Vulnerable Software and Affected Versions: Wanhu ezOFFICE version 11.1.0 Description: A critical issue has been found in the processing of the file defaultroot/platform/bpm/work flow/operate/wf printnum.jsp. The manipulation of the recordId argument leads to sql injection. The attack...

CVE-2024-22147

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce.This issue affects PDF Invoices & Packing Slips for WooCommerce: from n/a through 3.7.5...

PT-2024-15895 · Unknown · Hongmaple Octopus

Name of the Vulnerable Software and Affected Versions: hongmaple octopus version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /system/dept/edit. The manipulation of the ancestors argument leads to SQL injection. This issue can be...

Company Visitor Management System search-visitor.php File SQL Injection Vulnerability

Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file search-visitor.php. An attacker can exploit this vulnerability to...

CVE-2024-0730

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

PT-2024-13852 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: Jms Setting module for PrestaShop versions = 1.1.0 Description: The issue allows a guest to perform SQL injection. The method JmsSetting::getSecondImgs contains a sensitive SQL call that can be exploited to forge a blind SQL injection with a...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in PrestaShop due to an SQL injection vulnerability in the...

Project Worlds Online Time Table Generator SQL Injection Vulnerability

Online Time Table Generator is an online time table generator by Yugesh Verma Personal Developer. Project Worlds Online Time Table Generator version 1.0 suffers from a SQL injection vulnerability that stems from the parameter id of the file courseajax.php that can lead to SQL injection...

PT-2024-15792 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue affects the exec function of the file admin/operations/expense.php, leading to sql injection. This issue can be exploited remotely...

PT-2024-15791 · Smsot · Smsot

Name of the Vulnerable Software and Affected Versions: Smsot versions up to 2.12 Description: A critical issue has been found in Smsot, affecting an unknown functionality of the file /get.php. The manipulation of the tid argument leads to sql injection. This issue can be exploited remotely...

Smsot SQL Injection Vulnerability

Smsot is a professional community operation solution by China Motech Smsot. A SQL injection vulnerability exists in Smsot 2.12 and earlier versions, which stems from the parameter datasign in the file /api.php that can lead to SQL injection...

WordPress Plugin Burst Statistics Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...