PT-2023-28833 · Unknown · Janobe Online Job Portal

Name of the Vulnerable Software and Affected Versions: janobe Online Job Portal version 2020 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the ForPass.php component. Recommendations: For janobe Online Job Portal version 2020, consider disabling the...

UBUNTU-CVE-2023-43373

Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the nutenteagg parameter at /hoteldruid/interconnessioni.php...

CVE-2023-29245

A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, may allow an unauthenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application by sendi...

PT-2023-27938 · Unknown · Flutter Downloader

Name of the Vulnerable Software and Affected Versions: flutter downloader versions 1.11.1 and earlier Description: A SQL injection in the flutter downloader component allows remote attackers to steal session tokens and overwrite arbitrary files inside the app's container. The internal database of...

SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0

Summary A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, may allow an unauthenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application ...

CVE-2023-5019

A vulnerability classified as critical was found in Tongda OA. This vulnerability affects unknown code of the file general/hr/manage/staffreinstatement/delete.php. The manipulation of the argument REINSTATEMENTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

mccms SQL Injection Vulnerability

mccms diffuse city CMS is a rapid website building system for individual developers of China Smokey River South chshcms. The mccms 2.6 version exists SQL injection vulnerability, the vulnerability stems from allowing attackers through the file copyright/46/finish/1/list/1 SQL injection...

Food Ordering website SQL Injection Vulnerability

Food Ordering website is a food ordering website. A SQL injection vulnerability exists in Food Ordering Website version 1.0, which stems from some unknown processing in categoryfood.php that causes sql injection via the parameter id...

lmxcms SQL Injection Vulnerability

lmxcms dream cms is a website builder from China Dream Cms lmxcms company. SQL injection vulnerability exists in lmxcms version before 1.41, the vulnerability stems from the existence of an unknown function in the file admin.php, which leads to sql injection via the parameter lid...

CVE-2023-4670

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Innosa Probbys allows SQL Injection. This issue affects Probbys: before 2...

CVE-2023-4830

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tura Signalix allows SQL Injection. This issue affects Signalix: 7T0228...

CVE-2023-40958

A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management aka pdm v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0, pdm-15.0.1.0.0, and pdm-16.0.1.0.0 allows a remote authenticated attacker to execute arbitrary code via the query parameter in models/baseclient.py component...

CVE-2023-39642

Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::display...

PT-2023-27047 · Unknown · Bl Modules Xmlfeeds

Name of the Vulnerable Software and Affected Versions: Bl Modules xmlfeeds versions prior to 3.9.8 Description: The issue is related to a SQL injection vulnerability. It affects the component SearchApiXml::Xmlfeeds. Recommendations: For versions prior to 3.9.8, update to version 3.9.8 or later to...

PrestaShop LeoTheme leoblog SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image zoom and other features. A security vulnerability exists in PrestaShop LeoTheme leoblog version v3.1.2, which stems...

Aceka Company Management SQL Injection Vulnerability

Aceka Company Management is a company management software from Aceka. Aceka Company Management versions prior to 3072 are vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability...

PT-2023-27720 · Didotech Srl · Didotech Srl Engineering & Lifecycle Management +1

Name of the Vulnerable Software and Affected Versions: Didotech srl Engineering & Lifecycle Management aka pdm versions 14.0 through 16.0 Description: A SQL injection issue allows a remote authenticated attacker to execute arbitrary code via the request parameter in the models/base client.py...

WordPress plugin Slimstat Analytics SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

Vulnerabilities fixed in Nagios XI

Vulnerabilities have been fixed in Nagios XI. A malicious party can exploit the vulnerabilities to use SQL injection to manipulate data manipulate data or gain access to sensitive data within Nagios, or to perform a Cross-Site-Scripting XSS attack. Such an attack can lead to execution of arbitrar...

iCMS SQL Injection Vulnerability

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A SQL injection vulnerability exists in iCMS versions prior to 2.16.1, which stems from susceptibility to SQL injection attacks...